can't access to internet from LAN side

Kerzhain · Nov 30, 2018, 10:39 AM

Hello veryone,
I'm a noob in networking and in pfsense and I try to create a small infrastructure in virtualbox :

Currently I can't access to the internet from my vm windows 7 and I don't know what to do ?

I opened all ports on the firewall to test :

this is my LAN interface :

I also tried to add NAT unbound rules :

I can access to my WAN branch from my windows7 VM :

and I can ping google from pfsense :

someone knows what I'm doing wrong ? it will help me a lot

Thanks

viragomann · Nov 30, 2018, 11:08 AM

Clear the gateway in the LAN interface settings.

Kerzhain · Nov 30, 2018, 11:13 AM

Thanks for your answer , i just did it and I still can't have access to the internet form my VM

viragomann · Nov 30, 2018, 11:27 AM

Check if you can ping Google from the W7 machine by using the IP address.
You don't allow UDP on LAN which is needed for DNS.

Kerzhain · Nov 30, 2018, 12:05 PM

I tried to ping 8.8.8.8 and it doesnt work from my vm,
it's working from pfsense command line interface , DNS also ( I can ping google.com from pfsense command line interface)

viragomann · Nov 30, 2018, 12:16 PM

Check the network configuration on the W7 vm.

What gives "tracert 8.8.8.8" on that machine?

Kerzhain · Nov 30, 2018, 2:59 PM

I launched a tracert , it stopped at my LAN branch of my router ( first step )

Kerzhain · Dec 1, 2018, 9:20 AM

I have now access to internet from my VM windows7,
the issue was the firewall rules "Block Logon Network" blocking local IP to pass WAN side ,and so access to my physical router ( DOUBLE NAT )

Now I can even ping my phisical computer from my VM , but I still can't access to my VM from my physical computer event if all is open in my firewall.

Any idea?

viragomann · Dec 1, 2018, 11:26 AM

If WAN is facing to the internet, WAN rules should not affect access from the VM behind pfSense.

Your computers in the network in front of pfSense need a static route for the network behind pointing to pfSense.

stephenw10 · Dec 1, 2018, 1:24 PM

If you have removed the gateway from the LAN you should switch outbound NAT rules back to automatic.
The rule you have there currently has source 'any' which is almost always wrong. It will NAT even traffic from the firewall itself which can cause all sorts of odd issues.

Steve