Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Allow single ip to pass

    Scheduled Pinned Locked Moved Firewalling
    10 Posts 3 Posters 2.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K Offline
      kappler0
      last edited by

      Hello,

      I am a noob with pfsense so please bear with me here…
      I basically have a simple setup - i am allowing any to any for everything with the exception of using the pfBlocker to block all countries except US. Everything behind my FW is public (no private network at all) .. (webservers, etc)

      Now i am trying to allow full access to a couple IP's from India for a developer i hired. I created a simple rule in WAN tab to allow any for that specific IP but he cannot get to the servers behind my pfsense box... Did I miss something here? (screenshot below - the rule is 3rd line down)

      Any help here is appreciated!!  Thank you.

      1 Reply Last reply Reply Quote 0
      • marcellocM Offline
        marcelloc
        last edited by

        You may need to apply this Allow rule before any wan/country block rule.

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • K Offline
          kappler0
          last edited by

          Hmmm… did i get this backwards?
          I was thinking that the ones on top are first and down from there consecutively...
          Thx

          1 Reply Last reply Reply Quote 0
          • marcellocM Offline
            marcelloc
            last edited by

            Yes, first rule match.

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • K Offline
              kappler0
              last edited by

              Sorry, just to be clear, if i understand this correctly it is already before the WAN country blocks as it is in the screenshot above… (it is the one that has the 1.38.24.8 ip listed)
              Are you saying that it should be at the bottom below all the country blocks to work? Sorry, for the confusion, i just want to be sure i understand this.. I have been searching the wiki but cant find any docs on this simple thing.. :)

              Thank you!

              1 Reply Last reply Reply Quote 0
              • marcellocM Offline
                marcelloc
                last edited by

                I'm not seeing your screenshot.

                Can you attach it using post advanced options ?

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • K Offline
                  kappler0
                  last edited by

                  attached here..
                  Thx

                  pf1.PNG
                  pf1.PNG_thumb

                  1 Reply Last reply Reply Quote 0
                  • I Offline
                    inflamer
                    last edited by

                    If you want this guy to reach servers on your local network, you will have to create both port forwarding rules and associated firewall rules.

                    • Andreas
                    1 Reply Last reply Reply Quote 0
                    • marcellocM Offline
                      marcelloc
                      last edited by

                      Kappler,

                      The rule is fine if you have only valid ips and routing but it will be overwrited by pfBlocker package.

                      Try to create a list on pfBlocker package with this ip on custom list and Allow inbound action.

                      Att,
                      Marcello Coutinho

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • K Offline
                        kappler0
                        last edited by

                        I see… I will give that a try.. thanks a lot.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.