VMs traffic doesn't go through the right gateway
-
Just something I forgot to mention if I set the action for the rule to block or reject it does block and reject the traffic from the VMs! but if set it to pass doesn't apply the gateway correctly for VMs! so weird!
-
When you change rules you have to make sure you clear any states that might exist for the previous rules.. This is any firewall, an existing state would supersede any rules.
-
If you mean resetting states, I have tried that, it doesn't work.
-
Well your going to have to post your rules so we can see what else might be wrong. I have run pfsense for years and years on esxi.. Never any sort of issues.
-
So these are pictures of my LAN, WAN and the Alias I set up. There is nothing in floating and openvpn.
currently, the alias only has plex in it.https://ibb.co/mVbaFJ
https://ibb.co/f319aJ
https://ibb.co/bTWmNyEdit:
This is system log for firewall. You see the rule is applied to the traffic but somehow plex still connected through VPN!
https://ibb.co/kPbvhy -
That is NOT the way I would do it.
When you setup your vpn client on pfsense, do not grab routes.. Block it from adding routes and then just use policy routing to send traffic where you want.
How are you thinking your plex is using your vpn?
-
I used the instructions from the PIA website, sorry im new to all of this. I will try to google what you said to see if I can figure setting up that way.
I know plex still using VPN because it says in plex client and also when check my public IP through SSH in freenas ( second pic)
https://ibb.co/iqcXvJ
https://ibb.co/mczCvJBut it is not just plex, Freenas itself also shows the same behaviour and also another ubuntu VM on esxi
Thanks for your help so far!
-
yeah pia instructions are for EVERYTHING to use them.. Don't grab default route, and just policy route what you want to go through vpn and what you want to not use vpn.
Not sure where you get that idea that plex is going your vpn... Thats your browser getting that IP.. So whatever machine your running your web interface to plex is where that public IP is coming from.
Your running that web browser on your plex box? hitting the local.
-
That web browser is not on the plex box. but the IP is the public IP address of the plex box as it can also be seen from the SSH image. So even though I set the gateway to my actual public IP through the rule but whatsmyip.com still sees plex's IP as my VPN IP.
The weird thing is the fact that real devices like my phone and tablet are absolutely fine so if I add them to the noVPN alias when I check my IP it is actually my ISP IP. but the VMs behave differently this is soo odd!
-
So from a cmd line of your plex VM... Lets see it traceroute to some public IP..
