Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSense install blocks Internet, but computer into modem has Internet?

    Problems Installing or Upgrading pfSense Software
    8
    41
    9.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      eiger3970
      last edited by

      Yes, there is only one gateway setup in pfSense, on the WAN interface, set as default.

      ![pfSense System Routing Gateways.png](/public/imported_attachments/1/pfSense System Routing Gateways.png)
      ![pfSense System Routing Gateways.png_thumb](/public/imported_attachments/1/pfSense System Routing Gateways.png_thumb)

      1 Reply Last reply Reply Quote 0
      • F
        fragged
        last edited by

        Your WAN is within a private network so uncheck Block private networks on WAN interface settings.

        1 Reply Last reply Reply Quote 0
        • E
          eiger3970
          last edited by

          Thank you. Yes, I have done that and Internet seems to work 100% on the Mac now, however the Linux computer still has no Internet?

          Linux has a DHCP:
          inet addr:192.168.1.14
          Bcast:192.168.1.255
          Mask:255.255.255.0

          I rebooted the Linux computer after pfSense's change, but same issue?

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Ok.
            The pfSense box still can't ping its own WAN address?

            Lets look at your routing table. Diagnostics: Routes:

            Do you use IPv6 at all? You might consider disabling it completely if you don't.

            What is the Linux box using for its gateway?

            Steve

            1 Reply Last reply Reply Quote 0
            • E
              eiger3970
              last edited by

              So, pfSense can now ping from the pfSense LAN 192.168.1.155 to the pfSense WAN 192.168.0.2.

              The Mac computer is now working on the Internet 100% it seems.
              The Linux computer has no Internet.
              Linux computer has a DHCP IP 192.168.1.120.
              Default gateway: 192.168.1.155.
              Subnet: 255.255.255.0.
              Bcast:192.168.1.255.

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                Hmm. Nothing in the firewall logs I assume.

                The pfSense box can now ping external addresses too?

                The only other reason that one device might not be getting routed to the internet is that the NAT rules are not capturing traffic from it correctly. Have you switched to manual outbound NAT rules?

                Possibly this is some IPv6 issue such as Linux is using IPv6 as a preference but your router does not support it.

                Steve

                1 Reply Last reply Reply Quote 0
                • F
                  fragged
                  last edited by

                  Can you ping pfSense and things on the Internet (Google DNS, 8.8.8.8?) from your Linux machine? If yes, does DNS work on the Linux machine?

                  1 Reply Last reply Reply Quote 0
                  • E
                    eiger3970
                    last edited by

                    Thanks for the suggestions and yes, everything worked before I had to factory restore pfSense.

                    Odd behaviour:
                    Linux > ping > 8.8.8.8.
                    Linux > ping > 192.168.0.2 (pfSense WAN).
                    Linux > ping > 192.168.0.50 (modem LAN).
                    Linux > ping > 192.168.1.40 (computer Mac).
                    Linux > ping > 192.168.1.155 (pfSense LAN).
                    Linux > ping > www.google.com fails.
                    Linux flushed the DNS with command $ sudo /etc/init.d/dns-clean start > rebooted > same issue with no Internet.

                    Mac pings Internet.
                    Mac browsing is better. Browses 90% instead of 50% of Internet since I navigated to pfSense > Interfaces > WAN > Private networks > Block private networks: unticked > Block bogon networks: unticked.

                    pfSense > Diagnostics > Ping > www.google.com fails.
                    pfSense > Diagnostics > Ping > 8.8.8.8.
                    pfSense > Diagnostics > Ping > 192.168.0.2 (pfSense WAN).
                    pfSense > Diagnostics > Ping > 192.168.0.50 (modem LAN).
                    pfSense > Diagnostics > Ping > 192.168.1.40 (computer Mac).
                    pfSense > Diagnostics > Ping > 192.168.1.120 (computer Linux).
                    pfSense > Diagnostics > Ping > 192.168.1.155 (pfSense LAN).

                    Wi-Fi: no Internet.

                    1 Reply Last reply Reply Quote 0
                    • T
                      Topper727
                      last edited by

                      In the pfSense gui, click system then general setup.  Make sure you have atleast 1 DNS setup there and tell it your gateway (modem IP)

                      Dell 2950 g3 server
                      Intel(R) Xeon(R) CPU E5430 @ 2.66GHz
                      Current: 2000 MHz, Max: 2667 MHz
                      8 CPUs: 2 package(s) x 4 core(s)
                      8152 MiB and 600meg 10k drive
                      Pfsense 2.4 .. Hoping to get the phpvirtualbox going again.

                      1 Reply Last reply Reply Quote 0
                      • E
                        eiger3970
                        last edited by

                        Yes, I just added in a pfSense primary and secondary DNS which seems to have helped the Mac have 100% Internet.

                        Linux still no Internet.

                        Started rebuilding pfSense and installing Snort, then Mac stopped having Internet.
                        Had to disconnect modem from pfSense and connect to Mac to have Internet.

                        Tried pfSense restore to a previous version several hours earlier when modem in pfSense allow Mac to have Internet.
                        Still no Internet.
                        Factory restored modem and rebuilt and still no Internet when modem plugged into pfSense.

                        Either pfSense is faulty or the modem is faulty, however the modem works when plugged directly into a computer?

                        I think the modem model needs to be named and shamed at this point.

                        Model: BigPond NETGEAR Wireless Cable Modem Gateway CG814WG.
                        Cable MAC Address: 00:26:f2:36:1d:41.
                        CM certificate: Installed.
                        Device MAC Address: 00:26:f2:36:1d:43.
                        Hardware Version: 1.03.
                        Software Version: V3.9.26R15.
                        Standard Specification Compliant: DOCSIS 2.0.

                        Any suggestions on Internet through pfSense?
                        Last time I think I simply turned off the modem for 30 minutes, then plugged into pfSense and turned the modem on, and the Internet worked on the MAC (but not on the Linux).

                        1 Reply Last reply Reply Quote 0
                        • C
                          charliem
                          last edited by

                          It shouldn't be nearly this hard, and I think your problem is the combined gateway/modem/router/wireless_access_point device you just mentioned.

                          All cable modems that I've seen have supplied an IP address to pfSense WAN, from the ISP.  Your device seems to be operating as its own firewall, dhcp server, etc.  Can you put the device into bridge mode?  Perhaps there's a later, less draconian, firmware available to flash.

                          No good can come from pfSense competing with, and downstream from, a SOHO router device.

                          1 Reply Last reply Reply Quote 0
                          • E
                            eiger3970
                            last edited by

                            Sound advice charliem.

                            After resetting pfSense to factory defaults and rebuilding again, same issues:
                            pfSense > Diagnostics > Ping > 192.168.0.2 (pfSense WAN).
                            pfSense > Diagnostics > ping > 192.168.0.50 (modem LAN) fails.
                            Rest of computer networks can ping each other via pfSense, but nothing to 192.168.0.50.

                            Unfortunately, the cable modem has no bridge mode.
                            The ISP has booked a technician to bring a new cable modem tomorrow (I won't hold my breath). I requested a 'business' modem or a modem with bridge mode, so I'm sure I'll end up with another crappy router with all the requests lost in ISP cyberspace.

                            Is there some hardware I can buy that pfSense forumers know about?
                            I would like some recommendations please.

                            1 Reply Last reply Reply Quote 0
                            • E
                              eiger3970
                              last edited by

                              I have repeated the same tests several times and the modem works with Internet when directly in computers.
                              When pfSense is connected modem, pfSense will not ping 192.168.0.50 (Modem LAN).
                              Why?

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                I have no idea.  :-\

                                The problem here is that there is now much conflicting information here. You have posted several times already that the both the pfSense box and th clients behind it are able to ping the modem LAN interface on 192.168.0.50. What has changed since then?

                                We also need to clarify something. If your Linux client behind the pfSense box is able to ping 8.8.8.8 then IMHO that box has 'internet'. It is able to send packets to a remote box and receive replies. If it's unable to ping google.com then it has a route to the internet but does not have DNS. I think this may have confused me.
                                Additionally when you try to ping something and it fails there is always an error given and that error message is usually helpful in diagnosing why it failed, 'no route to host' 'unknown host' etc.

                                Putting the pfSense box behind another NATing router is far from ideal but it should work just fine. Even if you leave the 'block private networks' box checked that will NOT prevent client behind the pfSense box having general internet access.

                                Like Charlie said it should not be nearly this difficult!  ;)

                                When diagnosing a problem like this the way to do it is always one step at a time. If you are starting from scratch and reinstalling pfSense, as it appears you have, start with a plain vanilla install and test what works at each stage. Do not install Snort until everything else is working! That's still my top suspect in any situation with bizarre behavior.

                                Steve

                                1 Reply Last reply Reply Quote 0
                                • E
                                  eiger3970
                                  last edited by

                                  Thanks for the reply.

                                  Yes, I think there is conflicting information because although the fault is the same (pfSense WAN 192.168.0.2 won't ping the modem's LAN 192.168.0.50), I have once been able to make the pfSense WAN 192.168.0.2 ping the modem's LAN 192.168.0.50).

                                  I believe the conflict happened because of a 'lucky' fix, when I turned the modem off for about 30 minutes, then plugged the modem into pfSense and turned on the modem. However, having tried to repeat this step several times, I am unable to fix the issue.

                                  Since this lucky fix, I have factory reset pfSense to test and repeat this step/fix, which didn't work. Also, the computers had Internet, but the computers only had 80% Internet, which I later learned was for not having the DNS 8.8.8.8, 4.2.2.2 and the pfSense > Interfaces > WAN > Private networks > Block private networks: untick > Block bogon networks: untick.

                                  I think the Linux pinging 8.8.8.8 was when the Internet was working, however this issue was fixed by the step above using the pfSense Setup Wizard configuration.

                                  Yes, this is the only setup I can do, I don't understand how another setup can be done. I have an ISP cable modem with no bridge mode, so this seems to be the best setup. How do others do a different setup? Is there some special business hardware I need to buy?

                                  Yes, I have walked through step by step and it seems the problem repeats with pfSense static WAN IP 192.168.0.2 not pinging the modem LAN 192.168.0.50.
                                  When the modem is directly into a computer, the Internet works.

                                  So, the question I really have is, why or how can I make pfSense WAN 192.168.0.2 (subnet 255.255.255.0) ping the modem's LAN 192.168.0.50 (subnet 255.255.255.0)? I might draw up a topology?

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    There should be absolutely no reason that ping wouldn't work. It should work will all the settings at their install defaults (including 'block private networks').
                                    So why is the ping not working. Some possibilities:
                                    The pfSense box is sending the ping request out the wrong interface. That should never happen, particularly if you're pinging via the Diagnostic in the webgui where you have to specify which interface to use. I assume you're specifying the correct interface.  ;)
                                    The cables are run incorrectly (NICs connected wrongly). That situation is normally pretty obvious because nothing works, however if you have disabled the firewall or have sufficiently open rules you might get some traffic.
                                    The modem is not receiving the ping requests. Hard to see how that might happen.
                                    The modem is not replying. That's distinct possiblity but why is it not replying? Perhaps it only replies to devices in it's DHCP table, have you tried DHCP on the pfSense WAN?

                                    The best way to get to the bottom of this is to run a packet capture on the WAN while you try to ping the modem. Then you can see if the packets are leaving and replys coming back.

                                    Steve

                                    1 Reply Last reply Reply Quote 0
                                    • E
                                      eiger3970
                                      last edited by

                                      Ok, so ISP cable person provided a cable modem which has bridge mode.

                                      I changed pfSense from static WAN IP to DHCP.
                                      Connected new modem (in bridge mode) into pfSense and no Internet?

                                      I connect bridged modem or non-bridged modem into computer and Internet.

                                      I'm researching now if I'm missing a pfSense setting, as pfSense is a fresh factory reset with default settings for now.

                                      1 Reply Last reply Reply Quote 0
                                      • E
                                        eiger3970
                                        last edited by

                                        Tested pfSense > Diagnostics > Packet Capture > 8.8.8.8 > Start > Stop > no results.
                                        pfSense > WAN > DHCP > green arrow up > IP 0.0.0.0.

                                        Rebooted modem several times.
                                        Rebooted pfSense several times.

                                        Shouldn't pfSense be receiving an IP from the modem in bridge mode (like the public IP the modem passes through)?
                                        Could there be a MAC address block or something from the ISP. I don't understand the MAC address allocation of IPs yet, so perhaps someone could help me with that angle of troubleshooting?

                                        1 Reply Last reply Reply Quote 0
                                        • JeGrJ
                                          JeGr LAYER 8 Moderator
                                          last edited by

                                          Doing a packet capture is meaningless if there isn't any traffic going to that ip at that moment.
                                          As you don't even get an IP on the DHCP set WAN interface I'd check the cable modem/pfS connection/cabling.

                                          Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

                                          If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Indeed if you do a packet capture you want to capture everything, don't filter just traffic to/from 8.8.8.8.
                                            At the very least you should see the DHCP requests, and seemingly no replies.
                                            Yes the pfSense box should be getting an IP from the modem. Using modem only device and receiving a public IP is the situation where the modem may only talk to one MAC address though. If you plugged in your client directly you may need to power cycle the modem to get it to talk to the pfSense box.

                                            I think we have to get basic here!  ;)
                                            Since you have the green up arrow the NIC is clearly seeing the connection, the cable can't be completely broken.
                                            Speculation: the cable has a broken conductor such that not all pairs are working and it's trying to talk at 1Gbps and can't. What does Status: Interfaces: show for the WAN connection? Errors?
                                            What NICs are these? Are they both the same? Is it obvious which one is WAN? We have seen people struggle for a long time with NIC connected incorrectly.

                                            Steve

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.