Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Firewall Rules not working

    Scheduled Pinned Locked Moved Firewalling
    22 Posts 2 Posters 1.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      Konstanti @yupq6wlc79ts
      last edited by Konstanti

      @yupq6wlc79ts
      Rules for 5 devices must be first
      and the last one should be the rule for NORDVPN

      A deny rule for IPv6 does not need
      0_1545750689648_2aeef13d-2193-4e40-88ec-6c204cb1abe8-image.png

      1 Reply Last reply Reply Quote 0
      • Y
        yupq6wlc79ts
        last edited by

        That's exactly how I setup my 1 device to test the rule but when I do this, I don't get any internet connection on my single device. That's the issue.

        0_1545750762300_Firewall-Rules-LAN.png

        K 1 Reply Last reply Reply Quote 0
        • K
          Konstanti @yupq6wlc79ts
          last edited by Konstanti

          @yupq6wlc79ts
          I understand your problem.
          NORDVPN - OPENVPN ?

          1 Reply Last reply Reply Quote 0
          • Y
            yupq6wlc79ts
            last edited by

            Yes, OpenVPN.

            (sorry for late reply, since I am a new user with no reputation, I have to wait 120 seconds before I can reply, lol)

            K 1 Reply Last reply Reply Quote 0
            • K
              Konstanti @yupq6wlc79ts
              last edited by Konstanti

              @yupq6wlc79ts
              NordVpn Openvpn client setting
              Check this option

              0_1545751042363_b7aef87c-8d9d-42fa-83fb-6188aa62e0a4-image.png

              1 Reply Last reply Reply Quote 0
              • Y
                yupq6wlc79ts
                last edited by

                It wasn't checked. I checked it and tested the device by enabling the rule, No Internet on that device.

                K 1 Reply Last reply Reply Quote 0
                • K
                  Konstanti @yupq6wlc79ts
                  last edited by Konstanti

                  This post is deleted!
                  1 Reply Last reply Reply Quote 0
                  • Y
                    yupq6wlc79ts
                    last edited by

                    0_1545751773900_Screenshot from 2018-12-25 09-25-02.png

                    K 1 Reply Last reply Reply Quote 0
                    • K
                      Konstanti @yupq6wlc79ts
                      last edited by Konstanti

                      @yupq6wlc79ts
                      all right now.
                      check nat / outbound for wan interface
                      0_1545751927509_56e731d7-694f-4179-a10d-15926003de4c-image.png

                      1 Reply Last reply Reply Quote 0
                      • Y
                        yupq6wlc79ts
                        last edited by

                        0_1545751994300_nat outbound.png

                        K 1 Reply Last reply Reply Quote 0
                        • K
                          Konstanti @yupq6wlc79ts
                          last edited by Konstanti

                          @yupq6wlc79ts
                          Here is and mistake
                          no nat rule for wan 192.168.1.0/24
                          It is necessary to add

                          1 Reply Last reply Reply Quote 0
                          • Y
                            yupq6wlc79ts
                            last edited by

                            The reason was, It kinda acts as a kill switch. If the VPN goes down, no devices will be able to connect to the internet.

                            But my 5 devices aren't on VPN, so they should still be connected. What do I need to add/change here?

                            K 1 Reply Last reply Reply Quote 0
                            • K
                              Konstanti @yupq6wlc79ts
                              last edited by Konstanti

                              @yupq6wlc79ts
                              Add a nat outbound rule for the 192.168.1.0/24 on the wan interface as I showed in the picture
                              and 5 devices will be able to access the Internet via wan
                              Do not delete anything

                              1 Reply Last reply Reply Quote 1
                              • Y
                                yupq6wlc79ts
                                last edited by yupq6wlc79ts

                                Tada!

                                @Konstanti - Thank you so much. That worked. I think I get now what you were saying earlier (no nat rule for wan), makes sense now that I get it. Lol.

                                Appreciate it.

                                So now, for each device I want to connect to WAN, I'll have to manually add the entry in the Firewalls - Rules? Any way I can combine all 5 of them in 1?

                                K 1 Reply Last reply Reply Quote 0
                                • K
                                  Konstanti @yupq6wlc79ts
                                  last edited by

                                  @yupq6wlc79ts
                                  It is possible to allocate them in a separate subnet ( as I have done)
                                  or create an alias firewall / alias ( write there all 5 ip)
                                  and then use the alias in the rule as a source.
                                  Then the rule will be one

                                  1 Reply Last reply Reply Quote 1
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.