New pfsense user - cant get routing to run
-
you understand that 90.0.0.0/16 is allocated to France Telecom and it's not rfc1918 ?
you should not use it as your wan / lan address for pfsense. i don't want to be rude but "can not change that easily" is bullshit, you have to do that asap and it's probably the source of your trouble as pfsense is not restricting LAN in any way, it's open to everything out of the box, another reason could be if you have DNS forwarding/ DNS Resolver that is not working -
I know. But this in in my LAN and actually my house is in france and I have setp about 180 LAN devices since about 20years, some of which I can not change their IP address because these are devices (IP webcams) for which I have no admin access. so far the firewall in the cable modem handled all that without problem but I wanted to upgrade to anouter firewall as I need more port forwarding options (NAT), which the cable modem does not has.
It would be very nice if somebody is willing to help me with my existing configuration instead of such critism which does not lead me forward.
As I said I am even willing to pay for it.
Thanks much,
Markus -
i told you also to check if dns resolver / dns forwarder is working. maybe you can try to ping something like 8.8.8.8 and see if it answer. if you already did, tell us what you tried, we need more info
you should also know that it is impossible for you to access any website/services present inside 90.0.0.0/24 out of your network -
@mabebi said in New pfsense user - cant get routing to run:
As I said I am even willing to pay for it.
Here you go
https://www.netgate.com/support/If I were to actually charge for the support I gave here, it wouldn't be really any cheaper ;)
first thing going to tell you is this is freaking borked!
My LAN computers has 90.0.0.0/24 addresses (can not change that easily)
Well not the issue of how hard it is or isn't that is clearly not correct... Fix that should be 1st priority..
An intelligent man is sometimes forced to be drunk to spend time with his fools
If you get confused: Listen to the Music Play
Please don't Chat/PM me for help, unless mod related
SG-4860 24.11 | Lab VMs 2.7.2, 24.11 -
I have tried with both DNS forwarding and also DNS resolver. No chance. When I ping 8.8.8.8 from a LAN PC I get no route to host. I habe also changed the WAN pfsense interface to 10.0.1.1 and the cable modem to 10.0.1.83 but still no success. Can I post here some diagnostic / info page from my pfsense?
-
yes of course, we actualy need it
-
Which info page shall I post here?
And the paid netgate support is to a mon yearly supscription, I wanted just support to get it up and running that is the most urgent need....
-
@mabebi said in New pfsense user - cant get routing to run:
I have setp about 180 LAN devices since about 20years
Yep and you did it wrong. Not saying that to be crude but putting Diesel in a gasoline car is also wrong and disastrous.
Set all your devices to use DHCP if they are not already and then it will make it easier with less downtime.
If you are using the service who's IP space you barged in on then the possibility that they are trying to direct traffic the wrong direction for some services always exists.. Or if you have WAN and LAN in the same subnet?? That wont work either. edit- does not look like you do..
You are double NAT'd. Are you able to connect a computer to your modem directly and get out? Did you reboot the modem between some of the changes?
-
@mabebi said in New pfsense user - cant get routing to run:
more port forwarding options (NAT), which the cable modem does not has.
Also this- You seem to be double NAT'd as I mentioned in my first post. You will have to put your modem in true bridge mode.. or get it to port forward everything to your pfSense box to get anything to work if you are trying to give access from the outside.
Otherwise you will probably be back here asking why its not working. :)
-
@johnpoz said in New pfsense user - cant get routing to run:
If I were to actually charge for the support I gave here, it wouldn't be really any cheaper ;)
I wonder how much free time people give here sometimes and if they ever add it up??
Easily several thousand dollars worth of free support per day given on this forum.
-
@chpalmer said in New pfsense user - cant get routing to run:
Easily several thousand dollars worth of free support per day given on this forum.
Understatement of the year ;) hehehe
-
@mabebi said in New pfsense user - cant get routing to run:
I have also changed the WAN pfsense interface to 10.0.1.1 and the cable modem to 10.0.1.83
Also.. what are your subnet sizes.. /24? /8? /32??
