Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSense 2.1 no internal access to web server box

    Scheduled Pinned Locked Moved
    2.1 Snapshot Feedback and Problems - RETIRED
    4
    11
    4.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      podilarius
      last edited by

      If you are using pfsense as your gateway and dns server for internal use only, then setup a host override that points the domain name to the internal address and not the external address. This is called split horizon dns. This is IMHO a better way to go than nat reflection. The results are usually faster and more stable.

      1 Reply Last reply Reply Quote 0
      • R
        Rickinfl
        last edited by

        I don't have DNS Server running. It's setup a as forwarder from what I'm seeing.  How do I setup a Split horizon DNS? does this effect my DNS forwarder?  Now sure how to do this.

        1 Reply Last reply Reply Quote 0
        • R
          Rickinfl
          last edited by

          Just tried the Split Horizon dns with no luck…  Here is my problem. I don't have a domain name for it. I access it via a IP address example:

          to access it from outside I go to  xx.xx.xx.xx/mediawiki  from inside I use to access it by 192.168.0.99/mediawiki  now with the pfSense box install I can't access it from inside anymore.

          This is what I setup in the Split Horizon DNS:

          Host - mediawiki
          Domain - mediawiki
          IP Address - 192.168.0.99

          1 Reply Last reply Reply Quote 0
          • W
            wallabybob
            last edited by

            @Rickinfl:

            I lost access to my Media Wiki

            Access FROM where? If you are trying to access that service from a host on the same IP subnet (192.168.0.0/24?) then the access attempt shouldn't go through pfSense. If you are trying to access that service from a host on a different IP subnet (e.g. 192.168.10.0/24) then it would probably help us to help you if you provided more details, for example, "the access attempt to the media wiki goes in the pfSense OPTx inteface and out the pfSense OPTy interface".) If you are trying to access that service from the Internet

            @Rickinfl:

            The problem is ever since I put a pfSense box online

            It would be helpful to provide details of how you changed your network when you "put a pfSense box online".

            1 Reply Last reply Reply Quote 0
            • R
              Rickinfl
              last edited by

              I have 3 Machines running at home. Media Wiki, PS3mediaserver and pfSense box.  I use to be able to access the Wiki and PS3mediaserver from my computer here at the house just by typing 192.168.0.99/mediawiki and everything worked fine including accessing it from the internet from work at http://xx.xx.xx.xx/mediawiki  As for my network before when everything worked I was using a Cisco/Linksys 4200 router. I removed it and put in it's place the pfSense box this is when the LAN access issue started.

              My IP addresses for the boxes:

              My Computer 192.168.0.10
              pfSense box 192.168.0.1
              Mediawiki 192.168.0.99
              PS3mediaserver 192.168.0.60

              Submask is 255.255.255.0 on all boxes
              Gateway is the pfSense box 192.168.0.1

              As for going through the pfSense box I have no clue I'm very new to this. But ever since I installed the pfSense box I can't access the Mediawiki. Also can't access the Webmin on the Mediawiki box and the PS3mediaserver box and those are as this:

              mediawiki - 192.168.0.99:20000
              PS3mediaserver - 192.168.0.60:10000

              I can't access anything within the network from my computer at home, BUT I can access everything from the Internet from work just fine.

              I'm really new to this and I'm learning Linux so just be patient with me… I'm a quick learner just need step by step the first time then I'm off and running.

              1 Reply Last reply Reply Quote 0
              • P
                podilarius
                last edited by

                Do you have a switch in place or do you have multiple NICs in the pfsense machine? If you do, do you have the interfaces bridged and rules in place to allow traffic across the bridge?

                1 Reply Last reply Reply Quote 0
                • R
                  Rickinfl
                  last edited by

                  No switch just 2 nics in the pfSense box. I do have rules setup:

                  Proto       Source     Port       Destination   Port       Gateway Queue     Description
                  IPv4 TCP     *         *         192.168.0.99   80 (HTTP) *       none   NAT Media Wiki
                  IPv4 TCP     *         *         192.168.0.99   20000       *       none   NAT Webmin Media Wiki
                  IPv4 TCP     *         *         192.168.0.60   10000       *       none   NAT Webmin Media Server
                  IPv4 TCP     *         *         192.168.0.1     8443       *       none   NAT pfSense Web Interface

                  I had to put these rules in so to access it from outside if I remove them I can't access it anymore.

                  1 Reply Last reply Reply Quote 0
                  • P
                    phil.davis
                    last edited by

                    My Computer 192.168.0.10
                    pfSense box 192.168.0.1
                    Mediawiki 192.168.0.99
                    PS3mediaserver 192.168.0.60

                    Submask is 255.255.255.0 on all boxes
                    Gateway is the pfSense box 192.168.0.1

                    No switch just 2 nics in the pfSense box.

                    Exactly what is connected to the pfSense LAN port?
                    You list pfSense and 3 other devices - somehow these 4 devices need to/must be connected together (4 real ethernet cables into a switch?, a cable from pfSense LAN to a WiFi Access point that other things connect to?)
                    Please describe exactly how the LAN-side devices are connected.

                    As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                    If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                    1 Reply Last reply Reply Quote 0
                    • R
                      Rickinfl
                      last edited by

                      The WAN side goes straight from my Cable modem to the WAN NIC on the pfSense box. then the LAN side goes from the LAN card in pfSense to the 8 port switch which feeds all the other computers via CAT5 cable. Not using wireless at the moment I have to get a wireless card for the pfSense box.

                      1 Reply Last reply Reply Quote 0
                      • P
                        phil.davis
                        last edited by

                        @Rickinfl:

                        the LAN side goes from the LAN card in pfSense to the 8 port switch which feeds all the other computers via CAT5 cable.

                        The 3 other computers (My Computer, Mediawiki and PS3mediaserver) should all be able to talk to each other without pfSense or internet at all. So you need to get that to work - disconnect the pfSense LAN cable from the switch, then get the 3 computers working locally on the switch.
                        Once that is done, then connect pfSense LAN to the switch again - if a problem happens then we can try to help with it.
                        I guess the switch is a "plain ordinary" unmanaged switch, with no VLANs, no MAC filtering?
                        (If you have a fancy switch then maybe something was set in that that causes your local LAN issues)

                        As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                        If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post