[SOLVED] Access from LAN to DMZ(OPT1)

[theboda]

No vpns at all on the systems.
The dmz IP is set on a /32


[johnpoz]

Why would you be getting back that from .105?  pfsense lan IP was .1 you stated.

LAN IGB1 192.168.1.1

Do you have some host routes setup on this lan box?

you sure your lan mask is /24 and not maybe say /22 or larger?  Is this lan device windows box?  If so post output of ipconfig /all and route print.

[johnpoz]

your /32 is BROKEN…  Set that to /24 how it normally would be..

[theboda]

Set it to /24, still not working.
The laptop is a linux machine.
I don't have host routes set up, not that I know of.

[johnpoz]

well do a netstat -nr on it..

So you can see your routes… This will also validate what mask you have... When you ping you an IP on a different network you sure shouldn't be getting back from a different host

From 192.168.1.105 icmp_seq=1 Destination Host Unreachable

On your own network that is not your gateway that it can not get there.

[theboda]

here is my netstat output

[johnpoz]

your mask is /16 so 192.168.3 is on the same network…  So no never going to sent traffic to pfsense to get there.

[theboda]

Thank you!!  ::)

[johnpoz]

np - knew it had to be something silly.. If you would of been dhcp on the client never could of happened.

[NogBadTheBad]

Glad your sorted :)

BTW you have IPv6 track interface on your lan interface and no IPv6 firewall rules, if you dont use IPv6 disable it.