Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfsense disabling firewall for one specific ip

    Scheduled Pinned Locked Moved General pfSense Questions
    25 Posts 4 Posters 3.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • KOMK
      KOM
      last edited by KOM

      OK good. That's a start. Now what are you trying to accomplish that requires what you are describing?

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by johnpoz

        You have a block of 50 IPs?? so part of a /26? Seems ODD number to give someone... And with such an odd number its not actually routed to you... So your just attached.

        If that is the case then the solution of a switch and putting the box in front of pfsense is your best solution.

        I would just use the IPs you want out of your 50 as VIPs and do 1:1 NAT to boxes behind that you want all traffic to go to.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        S 1 Reply Last reply Reply Quote 0
        • S
          sbwcws @johnpoz
          last edited by

          @johnpoz I've multiple public IP's, I just need one local ip which I setup as ONE TO ONE NAT to bypass my firewall, I appreciate all your quick responses but it seems like it's a joke to some people, I am switching from FortiGate 900D

          1 Reply Last reply Reply Quote 0
          • KOMK
            KOM
            last edited by

            It's not a joke but we can't figure out why you insist on doing it that way, and you refuse to explain what you're trying to do despite several requests.

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by johnpoz

              @sbwcws said in pfsense disabling firewall for one specific ip:

              ONE TO ONE NAT to bypass my firewall,

              Then create an any any firewall rule - its that simple.. there will be nothing blocked.. Just natted.

              If you don't want it natted at all - then connect the device in front of your pfsense and give it your public IP..

              But I am with KOM here - you have not provide any info at all to why anyone would want/need to do such a thing. So to be honest it doesn't even peak my interest enough to think through how could be possible, if at all.. You could always get support direct from netgate/pfsense - with such a large deployment and moving away from fortigate sounds like enterprise level shit, have to assume you have a support contract with netgate ;)

              You might be able to do some hackery shit with a bridge, etc. But yeah it would be messy!

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              S 1 Reply Last reply Reply Quote 1
              • S
                sbwcws
                last edited by

                Thanks consider this resolved.

                1 Reply Last reply Reply Quote 0
                • KOMK
                  KOM
                  last edited by

                  20 replies later and we still don't know what the original problem was, nor the solution used.

                  S 1 Reply Last reply Reply Quote 0
                  • S
                    sbwcws @KOM
                    last edited by

                    @KOM You might need to scroll up..

                    1 Reply Last reply Reply Quote 0
                    • S
                      sbwcws @johnpoz
                      last edited by

                      @johnpoz said in pfsense disabling firewall for one specific ip:

                      @sbwcws said in pfsense disabling firewall for one specific ip:

                      ONE TO ONE NAT to bypass my firewall,

                      Then create an any any firewall rule - its that simple.. there will be nothing blocked.. Just natted.

                      If you don't want it natted at all - then connect the device in front of your pfsense and give it your public IP..

                      But I am with KOM here - you have not provide any info at all to why anyone would want/need to do such a thing. So to be honest it doesn't even peak my interest enough to think through how could be possible, if at all.. You could always get support direct from netgate/pfsense - with such a large deployment and moving away from fortigate sounds like enterprise level shit, have to assume you have a support contract with netgate ;)

                      You might be able to do some hackery shit with a bridge, etc. But yeah it would be messy!

                      Thanks

                      1 Reply Last reply Reply Quote 0
                      • S
                        sbwcws @viragomann
                        last edited by

                        @viragomann said in pfsense disabling firewall for one specific ip:

                        If you want to keep it behind pfSense why don't you want to go with NAT?
                        If the machine should get a public IP and bypass the firewall, why don't you connect it to WAN?

                        Do you have multiple public IPs or a public subnet?

                        Thanks

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.