Navigation is blocked
-
Hi
I have installed pfsense, i have configured rules in WAN and LAN to pass any things, but when i test connection in any PC i dont have access to any web page, but whan i ping i have positive response.
Can you explain to me please.
thnx -
And what are you doing for dns.. Can pfsense resolve what your trying to go to? www.domain.tld? What is your client using for dns?
-
for example in user PC when i ping for google.com i have positive response, but it dont work with navigator, ans other thing, it work just when i install squid proxy.
It didnt work without proxy -
This :
@abrougui:Hi
… i have configured rules in WAN and LAN to pass any things,...was not needed.
Install pfSense, and any PC can surf on the net - get mails, whatever.If after adding firewall rules things start to go downhill, you know where the problem is ;)
-
just i have aded the rules to pass any think in the wan and in the lan
-
Dont pass on WAN. Delete those rules.
-
i have delet all rules and also the same thing
-
OK - What is the pfsense connected to?
-
Yeah seeing hits on your block private rule.. Is something source natting traffic to pfsense that its from a rfc1918 address
-
Thats techy speak for "Are you plugged into a modem or a router?"
The thing your pfsense attaches to. Does it have 1 port or 4 or 5?
-
The LAN is connected in the our SWITCH and the WAN is connected diretly with the internet modem with 1 port
-
So that is a public IP on the WAN? not a 192. whatever?
Go to you interfaces. Select WAN. Remove the check marks for block private and block bogon. Reboot. See what happens
-
Also, if you are setting up service with the pfsense the first time, often you will need to call your ISP and tell them your pfsense WAN MAC address.
-
Or just reboot the cable modem.
-
That CAN also work. Works for ONTs also most of the time. Not always though.
-
No the wan ip adress is 192.168…. for the block provate and block bogon its the same things. Blocked or not.
Just one thing, if i instal squid and active it with the configuration in the user desktop. It work. But i dont need to use the proxy -
Thw wan IP starts with 192.168?
-
The 1 thing off the top of my head that would explain why it works with proxy is that you turned nat off on pfsense..
So now your traffic it looks like its coming from pfsense 192.168 wan IP vs some other 192.168.x.x network behind pfsense. That wouldn't explain the ping working though… What IP address is on pfsense wan 192.168.? And what is on the lan 192.168.?
If they are the same, the networks overlap then no its not going to work.. Proxy might work though..
If your saying you have rfc1918 on your pfsense when then you don't have a "modem" in front.. You have a gateway, ie modem/router combo doing NAT.. And yes if you have the same network on both sides of pfsense its going to be borked! Or your isp is doing carrier grade nat?
-
The wan is connected with the modem with ip 192.168.100.2 and the lan have the adress 192.168.101.1
-
quick fix to get things working (proabably)
Change LAN IP (and DHCP) to 192.168.183.1 with a /24
Make sure wan interface has block private unchecked. (save and apply all changes)
After that, take some time to unjack your setup. Its going to take some reading.
