Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Firewall Rules not working

    Scheduled Pinned Locked Moved Firewalling
    22 Posts 2 Posters 1.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Y
      yupq6wlc79ts
      last edited by

      It wasn't checked. I checked it and tested the device by enabling the rule, No Internet on that device.

      K 1 Reply Last reply Reply Quote 0
      • K
        Konstanti @yupq6wlc79ts
        last edited by Konstanti

        This post is deleted!
        1 Reply Last reply Reply Quote 0
        • Y
          yupq6wlc79ts
          last edited by

          0_1545751773900_Screenshot from 2018-12-25 09-25-02.png

          K 1 Reply Last reply Reply Quote 0
          • K
            Konstanti @yupq6wlc79ts
            last edited by Konstanti

            @yupq6wlc79ts
            all right now.
            check nat / outbound for wan interface
            0_1545751927509_56e731d7-694f-4179-a10d-15926003de4c-image.png

            1 Reply Last reply Reply Quote 0
            • Y
              yupq6wlc79ts
              last edited by

              0_1545751994300_nat outbound.png

              K 1 Reply Last reply Reply Quote 0
              • K
                Konstanti @yupq6wlc79ts
                last edited by Konstanti

                @yupq6wlc79ts
                Here is and mistake
                no nat rule for wan 192.168.1.0/24
                It is necessary to add

                1 Reply Last reply Reply Quote 0
                • Y
                  yupq6wlc79ts
                  last edited by

                  The reason was, It kinda acts as a kill switch. If the VPN goes down, no devices will be able to connect to the internet.

                  But my 5 devices aren't on VPN, so they should still be connected. What do I need to add/change here?

                  K 1 Reply Last reply Reply Quote 0
                  • K
                    Konstanti @yupq6wlc79ts
                    last edited by Konstanti

                    @yupq6wlc79ts
                    Add a nat outbound rule for the 192.168.1.0/24 on the wan interface as I showed in the picture
                    and 5 devices will be able to access the Internet via wan
                    Do not delete anything

                    1 Reply Last reply Reply Quote 1
                    • Y
                      yupq6wlc79ts
                      last edited by yupq6wlc79ts

                      Tada!

                      @Konstanti - Thank you so much. That worked. I think I get now what you were saying earlier (no nat rule for wan), makes sense now that I get it. Lol.

                      Appreciate it.

                      So now, for each device I want to connect to WAN, I'll have to manually add the entry in the Firewalls - Rules? Any way I can combine all 5 of them in 1?

                      K 1 Reply Last reply Reply Quote 0
                      • K
                        Konstanti @yupq6wlc79ts
                        last edited by

                        @yupq6wlc79ts
                        It is possible to allocate them in a separate subnet ( as I have done)
                        or create an alias firewall / alias ( write there all 5 ip)
                        and then use the alias in the rule as a source.
                        Then the rule will be one

                        1 Reply Last reply Reply Quote 1
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.