Cannot upload files or do upload tests
-
Hi all,
I have pfsense behind an asus dsl wifi router running as my internet gateway for all my wifi devices.
I am having an issue where I Cannot upload any files or conduct any upload tests, but all other traffic seems to work fine.My setup is as follows (see attached)
WAN router (asus).
Public: 123.x.x.x
Lan: 192.168.1.1
DHCP Subnet: 192.168.1.0/24 (pool .2 - .254)
DHCP Gateway: 192.168.1.2 (pfsense)PfSense
WAN: 192.168.1.2
LAN: 192.168.1.202I only have 1 firewall rule on my LAN interface
Allow Any/AnyA few details:
- The end game is to use PFsense as a VPN endpoint and firewall for wireless devices
- Web traffic appears to work, but I cannot upload images, files or run an upload speed test. (download test works fine).
- ASUS wan router is my modem too.
**- Very small files WILL upload approx up to 50-64kb - If I disable packet filtering on pfsense, everything works.**
- I have tried disabling outbound NAT
Can any one help me solve this? I dont know what else to try :)
Thank you!
-
I'd venture to guess it probably has something to do with having both the wan and lan on the same subnet.
Also you really should put the asus modem/router into bridge mode and avoid that double nat. -
asymmetric routing. You have your WAN and LAN on the same subnet. The response packets never go through the router and pfSense drop the state after never seeing a reply. The reason it does after 64KiB is that's the TCP send window before the state dies.
-
asymmetric routing. You have your WAN and LAN on the same subnet. The response packets never go through the router and pfSense drop the state after never seeing a reply. The reason it does after 64KiB is that's the TCP send window before the state dies.
Thanks for the replies. So this sounds right… Anyway I can avoid this?
My only concern is if I create a new subnet on the pfsense for the lan interface, I will not be able to pass my wifi traffic to it?Do i need a bridge interface between pfsense and the wifi router perhaps?
-
You should never have more than one subnet per broadcast domain and each interface should be a different subnet.