Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    VLAN cannot access to internal website

    Scheduled Pinned Locked Moved General pfSense Questions
    18 Posts 2 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      MR. Newbie @johnpoz
      last edited by

      @johnpoz said in VLAN cannot access to internal website:

      You sure this http server doesn't have a firewall, and is using pfsense as its gateway?

      http sir server firewall is off, and configured static ip with pfsense gateway. That is why I can access in LAN, I just wonder why in VLAN i cannot browse even it is exempted in internet option proxy.

      Thank you sir for all your replies. God bless

      1 Reply Last reply Reply Quote 0
      • M
        MR. Newbie @johnpoz
        last edited by

        This post is deleted!
        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          Well I can not see them.. ;)

          Are you using an explicit proxy or transparent.. Again - take 2 seconds and sniff.. Do you see pfsense sending the syn?

          Here sniffing on one of my vlans while I hit 80 from a different vlan

          See while sniffing on the 192.168.3 interface I see packet from 192.168.9.100

          sniff.jpg

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          M 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by johnpoz

            So your floating rule is forcing traffic out that loadbalancer gateway - so NO you wouldn't be able to get to you lan from there.

            Create a rule That allows where your trying to go before you force traffic out a gateway. As I stated in post 1.

            Put a rule above your floating that allows your annex net to get to your server IP on the lan net.. With such a rule I don't see how your saying your accessing your file servers to be honest.

            BTW your 2 bottom rules on your lan are completely pointless and would never be triggered.. Since you have an any rule above them.

            Rules are evaluated top down, first rule to trigger wins, no other rules evaluated.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            M 1 Reply Last reply Reply Quote 0
            • M
              MR. Newbie @johnpoz
              last edited by

              @johnpoz said in VLAN cannot access to internal website:

              Are you using an explicit proxy or transparent

              Transparent proxy : disabled . because I'm using squid proxy LDAP authentication

              1 Reply Last reply Reply Quote 0
              • M
                MR. Newbie @johnpoz
                last edited by

                @johnpoz said in VLAN cannot access to internal website:

                Create a rule That allows where your trying to go before you force traffic out a gateway

                After giving it a try. I think its working now. BIG HELP sir. Thank you so much . I love u. :)

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  Glad I could help..

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  M 1 Reply Last reply Reply Quote 0
                  • M
                    MR. Newbie @johnpoz
                    last edited by

                    @johnpoz YES sir, All vlan can now access our internal websites. ehehe. Now I will try to create another rule for our loadbalancer. ehehe. currently I just remove it because today is my deadline for me to run the website on all users. :)

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      You need to make sure you allow access to what you want locally to access before you shove anything out a gateway. Remember the rule orders.

                      https://docs.netgate.com/pfsense/en/latest/firewall/firewall-rule-processing-order.html

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      M 1 Reply Last reply Reply Quote 0
                      • M
                        MR. Newbie @johnpoz
                        last edited by

                        @johnpoz Noted sir, Thank you. I will post another topic regarding failover, again that one is with VLAN problem :)
                        Thank you for early christmas gift. new Knowledge ehehe

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.