Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Default Deny Rule - Where is it ?

    Scheduled Pinned Locked Moved General pfSense Questions
    21 Posts 4 Posters 3.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      doktornotor Banned
      last edited by

      Also, he's got hell of a mess there, including some prehistoric pfSense version and some complete nonsense set up including the ISP DNS servers on WAN being the OPT1 gateway (probably related to some overlapping multi-NAT.)

      1 Reply Last reply Reply Quote 0
      • T
        tamtap
        last edited by

        @doktornotor:

        Also, he's got hell of a mess there, including some prehistoric pfSense version and some complete nonsense set up including the ISP DNS servers on WAN being the OPT1 gateway (probably related to some overlapping multi-NAT.)

        can't upgrade its hardware specific.

        ISP DNS are NOT the OPT1 gateway. and DNS isnt a problem as OPT1 resolves without issue.

        There is no NAT issue.

        I have NO OPT1 rules same as I have no WAN rules and WAN works fine.

        So BACK to the original problem, can't ping hosts over OPT1.

        1 Reply Last reply Reply Quote 0
        • D
          doktornotor Banned
          last edited by

          @tamtap:

          can't upgrade its hardware specific.

          Can't support. It's not specific to anything except being fact of life. People don't use prehistoric buggy shit.

          @tamtap:

          ISP DNS are NOT the OPT1 gateway

          Yes it is. Actually look at the screenshots you have posted.

          1 Reply Last reply Reply Quote 0
          • T
            tamtap
            last edited by

            @Derelict:

            Dude.  You highlight OPT1 blocks then post LAN rules.

            Post your OPT1 rules and, please, read and understand this completely:

            https://doc.pfsense.org/index.php/Firewall_Rule_Troubleshooting

            you asked for LAN rules.

            1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              I said look at the rules on LAN to get you to see what you need to do on OPT1.

              And, please, read and understand this completely: https://doc.pfsense.org/index.php/Firewall_Rule_Troubleshooting

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • D
                doktornotor Banned
                last edited by

                @tamtap:

                you asked for LAN rules.

                No, he told you to "Look at the rules on LAN" so that you get a clue on what should be set up there. (Of course, without knowing you are wasting everyone's time here with multiposts and not telling anyone that OPT1 is not a LAN interface at all.)

                1 Reply Last reply Reply Quote 0
                • T
                  tamtap
                  last edited by

                  Thanks for pointing that out, had overwrite from ISP ticked corrected now.

                  Made ZERO difference to OPT1.

                  Maybe just a bug as its an old release, doesn't seem i'm trying to push the limits though just wanting a WAN connection to actually work.

                  1 Reply Last reply Reply Quote 0
                  • T
                    tamtap
                    last edited by

                    @doktornotor:

                    @tamtap:

                    you asked for LAN rules.

                    No, he told you to "Look at the rules on LAN" so that you get a clue on what should be set up there. (Of course, without knowing you are wasting everyone's time here with multiposts and not telling anyone that OPT1 is not a LAN interface at all.)

                    Why so confrontational I clearly stated in FIRST post of this thread I had 2 WAN's ?

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      OP:  What version of pfSense are you running?

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • D
                        doktornotor Banned
                        last edited by

                        @tamtap:

                        Thanks for pointing that out, had overwrite from ISP ticked corrected now.
                        Made ZERO difference to OPT1.

                        Look, ISP DNS servers is something you get via DHCP - on supported pfSense versions, that is. Not something you manually type somewhere. I hope you finally can see the problem with your prehistoric shit. If you are unable to upgrade, you should switch to something else than pfSense or upgrade your HW. Because, the stuff you are using is actually very insecure (and buggy, and people are just not using it, so asking for advise is generally futile.)

                        1 Reply Last reply Reply Quote 0
                        • T
                          tamtap
                          last edited by

                          actually its not

                          version in 1.2.3-RELEASE

                          1 Reply Last reply Reply Quote 0
                          • DerelictD
                            Derelict LAYER 8 Netgate
                            last edited by

                            version in 1.2.3-RELEASE

                            dude.  piss off.

                            Chattanooga, Tennessee, USA
                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              https://doc.pfsense.org/index.php/Versions_of_pfSense_and_FreeBSD

                              Dude that version came out in 2009..  Update to current and people more than willing to help you setup a dual wan that is a very common, click click setup.

                              version.png_thumb
                              version.png

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.