PPPoE rule disappears / NG0 in firewall log
-
I am running 1.2-RC2 and am having issues with the firewall rules. If I set a rule on the PPPOE interface it disappears since there isnt a PPOE tab to maintenance these rules. Even after setting a rule it doesnt seem to work. I am connecting to my ISP using PPPOE. I check the firewall log and see blocked traffic is coming in on 'NG0' instead of WAN. I don't know if this is typical, but it doesnt make it clear as how to configure the NAT & rule. Any help would be greatly appreciated.
-
Uhm… your post is kind of useless....
Could you please elaborate on your setup?
pppoe on which interface? (only possible on WAN afaik). Is the modem in bridged mode? Do you need NAT? Do you need to NAT out multiple subnets? Multiwan? What rules are you talking about? Firewall or NAT?
(--> no clue what your setup is and no clue what you want to do) -
PPPoE is on the WAN connecting to my ISP. My DSL modem is bridged into the WAN. The pfsense WAN port receives the public IP address from my ISP. This part is correct. I only use a single WAN and one net. I am trying to port forward port 80 into a device on my LAN. I setup a NAT rule to forward port 80 traffic on the WAN interface to the web server on the LAN address. I have it setup the corresponding firewall rule to allow port 80 traffic to the LAN machine. Under this configuration, traffic doesnt reach the LAN web server. In the firewall log it shows the traffic being blocked on the 'NG0' interface for other ports, but doesnt show port 80 at all. From the log it looks like traffic should be reaching its destination. I would have thought it would have shown the WAN instead of NG0 though. I used to run PPPoE on the DSL modem. In this configuration it shows WAN traffic in the log. When I use PPPoE in pfsense to connect to my ISP, it shows NG0. When I apply a WAN rule should it also apply to this NG0 interface? Its not an option when setting up NAT and rules.
-
On PPPOE ng0 == WAN for rule creation
ng0 is actually the virtual device at the end of the pppoe connection but pfsense takes care of that on the web gui it is just the logs that show ng0
-
OK, so you want to filter your incoming traffic on WAN. Use the WAN tab from Firewall | rules then and forget about PPPoE even though you are connecting to your ISP this way.
The PPPoE field in the drop down box might be related to pfSense running as PPPoE server. But I'm guessing here.
-
Thanks for the help. That clears up my issue.
