Outbound traffic blocked? NAT issues?

[pfanonsense]

@chpalmer:

Who is your ISP?  What version of pfSense?  What cable modem?

Can you put the cable modem in bridge mode (if a gateway device) and plug it directly into the WAN of the pfSense box?  (restart the cable modem if you do that)

Time Warner

I thought about bridge mode but then i figured I would lose my WAP with the change into bridge mode.
What you are saying is that if I turn it into bridged mode I will still have a WAP and the traffic from the WAP will actually be routed to the PFsense Router?

cable modem/WAP is plugged directly into the PFsense router in an onboard NIC.
The wired end users are connected via a 4 port PCI NIC. on em3 (4th port)

[pfanonsense]

@viragomann:

Is there a filter rule on LAN interface to allow outbound traffic?
By default pfSense allows any traffic outwards.

Check the outbound NAT and post a screenshot.

Also check the interface settings (network mask) of pfSense WAN and the modems LAN.

ok here are some pictures that should help us a little better





[viragomann]

Delete the gateways GW_WAN, LANGW and GW_LAN.

On LAN interface you only allow TCP to the internet. So the devices can neither access a DNS server nor ping anything, not even to pfSense.

[pfanonsense]

@viragomann:

Delete the gateways GW_WAN, LANGW and GW_LAN.

I deleted them

@viragomann:

On LAN interface you only allow TCP to the internet. So the devices can neither access a DNS server nor ping anything, not even to pfSense.

When you refer to the LAN interface are you referring to the on on the TPLINK or Pfsense?
I see on the pfsense that there is a rule for port 80 na "anti lock" rule which cannot be changed nor moved down the rule list.

any suggestions on where to go from here?

I tried bridging my modem and there was no access to the web GUI either directly connected to the tplink or connected to the pfsense LAN

[MasterX-BKC-]

When a Cable/DSL modem is in bridge mode, it has no web gui, and no settings to configure, you instead set the pfsense wan port to DHCP, or if you have a assigned static ip, those settings.

[chpalmer]

Time Warner is cable.
pfanonsense-  When I first read this I thought your setup was a separate cable modem then wirelessrouter then pfsense box..

Id still put it in bridge mode if I were you and find myself another AP but that is your choice.

You need to open up your LAN rules back to default.  source- All LAN Net  any..  Source  all any any ect  otherwise as viragomann noted- you will never have access to some things you need to surf the web.

If your modem is still bridged you need to reboot it…  then see what the IP address to your pfSense WAN is.  If it is still private space you should release/renew it..  Easy way- reboot pfSense.

[MasterX-BKC-]

It is also possible you could end up with a 100.64.0.0 ip address if TWC is using Carrier Grade NAT per RFC 6598 in your area.

[pfanonsense]

@chpalmer:

Time Warner is cable.
pfanonsense-  When I first read this I thought your setup was a separate cable modem then wirelessrouter then pfsense box..

Id still put it in bridge mode if I were you and find myself another AP but that is your choice.

You need to open up your LAN rules back to default.  source- All LAN Net  any..  Source  all any any ect  otherwise as viragomann noted- you will never have access to some things you need to surf the web.

If your modem is still bridged you need to reboot it…  then see what the IP address to your pfSense WAN is.  If it is still private space you should release/renew it..  Easy way- reboot pfSense.

Do you think a fresh start would be benificial??
also there is a GUI for the bridged mode, it jsut literally shows you what is going on with no options to change anything.
The weird thing is, is that in the manual it tells you, after placing it in bridged mode you can turn DHCP on in the GUI…

[Nullity]

@pfanonsense:

@chpalmer:

Time Warner is cable.
pfanonsense-  When I first read this I thought your setup was a separate cable modem then wirelessrouter then pfsense box..

Id still put it in bridge mode if I were you and find myself another AP but that is your choice.

You need to open up your LAN rules back to default.  source- All LAN Net  any..  Source  all any any ect  otherwise as viragomann noted- you will never have access to some things you need to surf the web.

If your modem is still bridged you need to reboot it…  then see what the IP address to your pfSense WAN is.  If it is still private space you should release/renew it..  Easy way- reboot pfSense.

Do you think a fresh start would be benificial??
also there is a GUI for the bridged mode, it jsut literally shows you what is going on with no options to change anything.
The weird thing is, is that in the manual it tells you, after placing it in bridged mode you can turn DHCP on in the GUI…

Literal "bridge mode" means the devices allows no access to itself, it only forwards traffic.

but, many ISP-supplied devices don't do that because that means no GUI access, so many allow both bridging & GUI access.

Yeah, I think a fresh start is a good idea. You never know what settings you may have changed while newbishly clicking random things (I've done this many times myself… dangerous).

[pfanonsense]

@Nullity:

Yeah, I think a fresh start is a good idea. You never know what settings you may have changed while newbishly clicking random things (I've done this many times myself… dangerous).

Ok I will try this out and see what happens.

I have a 60GB SSD coming in so this is all some what of practice and somewhat of try, fail, try, fail…
Hopefully it becomes a success.
Alternatively I will end up buying solely a cable modem, even though i literally just bought this modem/WAP.
We'll see!

Ill update you guys. I really appreciate the help!