Help?! No internet from LAN unless using a vpn client?

[gibbzy2k1]

Yes I can ping 8.8.8.8 from my laptop.

I currently have Cisco/openDNS set as the DNS on pfsense. I have just tried ticking to allow DNS to be overridden by dhcp. Still the same issue.

[kejianshi]

Its your DNS, so focus there.  Also look for firewall rules that would block DNS.

[gibbzy2k1]

That's what I am thinking. But nothing changes when I change the DNS settings. The FW wasn't touched over the weekend, but something obviously happened for it to suddenly stop working yesterday.

I have attached a shot of the nat rules and LAN rules. if it helps. Again, none of these have changed though.


[kejianshi]

Add a rule, which you can delete later on the Lan to allow any to any.  See what happens.

[gibbzy2k1]

I created a new LAN rule to allow any to any and put it just under the anti-lockout rule. No difference.

[kejianshi]

"I currently have Cisco/openDNS"

Could you try resolver and see if it works?

[gibbzy2k1]

Sorry, what do you mean try resolver? DNS resolver is enable on the fw if that's what you mean?

[kejianshi]

I'm confused now…  I though you were using an external Cisco/openDNS for DNS?

[gibbzy2k1]

Sorry I should have explained better. When I set up the fw I put openDNS server IPs into the DNS server under the general setup. 208.67.222.222 and 208.67.220.220, both of which I am able to ping.

I have also tried replacing with google DNS IPs and enabling the over ride with DHCP/PPP on WAN.

All with no luck.

[kejianshi]

Yes - But in your services TAB…

Do you have resolver or forwarder activated?

[gibbzy2k1]

sorry resolver is enabled, forwarder is not.

[kejianshi]

If you are trying to get your DNS served from another place, turn off resolver and turn on forwarder.

[gibbzy2k1]

Thanks. I have tried that to no avail. I'll have to keep looking tomorrow and try to work out what has changed over the weekend.