Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Configure 3 lan in pfsense

    Scheduled Pinned Locked Moved Cache/Proxy
    42 Posts 4 Posters 6.7k Views 4 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A Offline
      ab96 @stephenw10
      last edited by

      @stephenw10 My configuration
      1.JPG 1.1.JPG 1.2.JPG 1.3.JPG 1.4.JPG 1.5.JPG

      2.JPG

      1 Reply Last reply Reply Quote 0
      • stephenw10S Offline
        stephenw10 Netgate Administrator
        last edited by stephenw10

        Ok, which of those is in Blacklist2 that should be being blocked?

        And I assume it is not in conexionpf?

        It should be blocked because 'Do not allow IPs' is checked?

        Steve

        A 1 Reply Last reply Reply Quote 0
        • A Offline
          ab96 @stephenw10
          last edited by

          @stephenw10 Ok, which of those is in Blacklist2 that should be being blocked? R = blocked domains for the support area

          And I assume it is not in conexionpf? R = Is the ip of the pfsense to ensure connection to internet

          It should be blocked because 'Do not allow IPs' is checked?

          R = Then I disable this option, I understood that it was so they could not place the ip
          ¨Do not allow IP-Addresses in URL
          To make sure that people do not bypass the URL filter by simply using the IP-Addresses instead of the FQDN you can check this option. This option has no effect on the whitelist¨. in common ACL

          1 Reply Last reply Reply Quote 0
          • stephenw10S Offline
            stephenw10 Netgate Administrator
            last edited by

            That option is to stop people using the IP directly.
            I was asking if you expected that traffic to be blocked because the only thing I see in the log is the pfSense webgui at 172.54.54.254 and mozilla.org. I assume both of those should be passed?

            Incidentally 172.54.54.X is public IP space, it belongs to t-mobile. You should be using a private address there.

            Steve

            A 1 Reply Last reply Reply Quote 0
            • A Offline
              ab96 @stephenw10
              last edited by

              @stephenw10 Yes, mark the traffic and the ip is from my proxy jejejje
              guard8.JPG

              1 Reply Last reply Reply Quote 0
              • johnpozJ Offline
                johnpoz LAYER 8 Global Moderator
                last edited by

                @stephenw10 said in Configure 3 lan in pfsense:

                172.54.54.X is public IP space, it belongs to t-mobile.

                You can not just use public space internally and not expect to run into problems at some point..

                There is plenty of rfc1918 to use.. 172.16-31.x.x is open for you to use..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 25.07

                A 1 Reply Last reply Reply Quote 0
                • stephenw10S Offline
                  stephenw10 Netgate Administrator
                  last edited by

                  Ok, which of those URLs should be blocked?
                  It looks like facebook is being denied there. Is that in Blacklist2?

                  Steve

                  A 1 Reply Last reply Reply Quote 0
                  • A Offline
                    ab96 @johnpoz
                    last edited by

                    @johnpoz :o

                    1 Reply Last reply Reply Quote 0
                    • A Offline
                      ab96 @stephenw10
                      last edited by

                      @stephenw10 Facebook I block it in general in squid and I want to block the blacklist 2

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S Offline
                        stephenw10 Netgate Administrator
                        last edited by

                        You blocked facebook where?

                        A 1 Reply Last reply Reply Quote 0
                        • A Offline
                          ab96 @stephenw10
                          last edited by

                          @stephenw10 In squid to see if it blocks me in a general way

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S Offline
                            stephenw10 Netgate Administrator
                            last edited by

                            Yes. I mean where exactly did you make that setting?

                            A 1 Reply Last reply Reply Quote 0
                            • A Offline
                              ab96 @stephenw10
                              last edited by

                              @stephenw10 Thank you very much already resolved. !! But now I have problems with squid because when I activate it, I do not load the google page and others like yahoo. What could this error be caused? :/

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S Offline
                                stephenw10 Netgate Administrator
                                last edited by

                                So what was the problem?

                                What error do you see now when you turn on Squid? In the browser? In the squid log?

                                Steve

                                A 1 Reply Last reply Reply Quote 0
                                • A Offline
                                  ab96 @stephenw10
                                  last edited by

                                  @stephenw10 I already solved it thanks !!! :D

                                  A 1 Reply Last reply Reply Quote 0
                                  • A Offline
                                    akuma1x @ab96
                                    last edited by

                                    @ab96 said in Configure 3 lan in pfsense:

                                    @stephenw10 I already solved it thanks !!! :D

                                    Yeah, but I think @stephenw10 was asking how you did it, if you don't mind telling your story.

                                    Jeff

                                    A 1 Reply Last reply Reply Quote 0
                                    • A Offline
                                      ab96 @akuma1x
                                      last edited by

                                      @akuma1x @stephenw10 only change the range of the ips ! :o thanks !

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.