Outbound NAT'ing - unable to reach internet from behind the pfsense

drazil

Outbound NAT'ing does not seem to work. My WAN interface is a /29 issued by our ISP

From the Pfsense I can reach the internet, however devices behind the pfsense cannot. The packet reaches the internal interface of the pfsense and then nothing. My automatic rule looks like this: Interface: WAN 192.168.128.0/17 source port: * Destination: * Destination Port: * NAT Address: WAN address NAT port: * Static Port =>(linked rule icon) Description: Auto created rule.

I have tried Outbound NAT mode: Automatic as well as Hybrid

Any ideas why outbound NAT's is not functioning as expected?

viragomann

Why do you think the Outbound NAT doesn't work?
Have you done a packet capture on WAN? If yes, please post the output.

Can you resolve public host names on a LAN device?

johnpoz

"WAN 192.168.128.0/17"

Huh?

What is it with people and ascii art.. Can you not just take a screen shot and post exactly what your seeing..

Doesn't like every OS on the planet that has a gui currently have a built in screen snipping tool..

https://support.microsoft.com/en-us/help/13776/windows-use-snipping-tool-to-capture-screenshots
https://www.itg.ias.edu/content/keyboard-shortcuts-capture-screen-shot-mac-os-x
https://www.howtogeek.com/268036/how-to-take-a-screenshot-on-linux/

Firefox added a screenshot util even.
https://support.mozilla.org/en-US/kb/firefox-screenshots

Chrome OS
Press Ctrl + switch window. (For non-Chrome OS keyboards, press Ctrl + F5.)
Your screenshot is saved as a PNG file in your "Downloads" folder.

Why do we constantly have to deal with this ascii art nonsense??

Took me less time to look up all the different ways to take screen shots and post them then try and figure out what that is suppose to be telling me.. So your running 192.168.128.0/17 on your lan side network?? Why??? You really have that many hosts? Do you have a shit ton of downstream networks?

viragomann

@johnpoz:

"WAN 192.168.128.0/17"

Huh?

That's the outbound NAT rule, so 192.168.128.0/17 is presumably the LAN network.

However, the "Huh?" is appropriate though. ;)