Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [Solved] Firewall rules not loaded correctly

    Scheduled Pinned Locked Moved Firewalling
    7 Posts 3 Posters 720 Views 3 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T Offline
      Teddy
      last edited by Teddy

      Hey together,
      i am having a new problem with my PFSense.

      I have two LAN:

      • My general LAN for myself
      • Guest LAN for guests

      After a reboot, devices in the guest (W)LAN can obtain an IP address, but have no internet access. If i login to PFSense go to Firewall -> Rules -> Guest LAN -> i have to open the rule for allow traffic (passing by VPN) to the internet -> save -> Firewall rules are reloaded and it works immediately without changing anything.

      I can reproduce this failure here always again. Make a reboot of PFSense, Guest LAN doesn't work -> just open the mentioned rule -> save it -> everything works perfectly.

      Does anyone have an idea or solution?

      Brgds

      GertjanG 1 Reply Last reply Reply Quote 0
      • GertjanG Offline
        Gertjan @Teddy
        last edited by

        @Teddy said in Firewall rules not loaded correctly:

        just open the mentioned rule -> save it -> everything works perfectly.

        We didn't saw this rule ... don't know what is does, or should do.

        @Teddy said in Firewall rules not loaded correctly:

        (passing by VPN

        When this "VPN" is removed the issue persist ?

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        1 Reply Last reply Reply Quote 0
        • T Offline
          Teddy
          last edited by Teddy

          Hey there,
          i add a screenshot of the rule, that is active.

          I didn't try it yet with removing the VPN. But just the rules for the VPN is not being loaded correctly!

          The first rule should just pass all traffic from the guest-wifi through the CG VPN Service. For that reason i also chose that interface as destination. In general this rule works perfectly fine, but i always have to reload it after a reboot. Otherwise no traffic possible.

          Rules.JPG

          GertjanG 1 Reply Last reply Reply Quote 0
          • P Offline
            protonwork23 Banned
            last edited by

            This post is deleted!
            1 Reply Last reply Reply Quote 0
            • GertjanG Offline
              Gertjan @Teddy
              last edited by

              @Teddy said in Firewall rules not loaded correctly:

              But just the rules for the VPN is not being loaded correctly!

              Any messages ? Errors ? How does "not being loaded correctly" shows up ?

              Your CYBERHOSTOPT1_VPNV4 is a gaewaty, right ?

              You activated Gateway Monitoring, so the gateway gets restarted, rebuild if it goes bad ?

              After a reboot, can you ping out using that gateway (VPN) ?

              VPN log confirms the connection is up ?

              I've never used these :

              b8159cfb-6e94-41dd-8550-b5a891934afb-image.png

              maybe they are useful for you ?

              No "help me" PM's please. Use the forum, the community will thank you.
              Edit : and where are the logs ??

              T 1 Reply Last reply Reply Quote 1
              • T Offline
                Teddy @Gertjan
                last edited by

                @Gertjan
                Messages or errors not. I just expect, that the rules were not loaded correctly, because after loading the rules again, it worked properly, without any change in the rules.

                I just activated Gateway Monitorin, that was (for which reason ever) disabled. Now it looks okay, i think. Rebooted two times and always the connection to the internet was possible. So, maybe it really was just the gateway monitoring, i'll proceed to check if the problem is solved!

                Thank you at first so much for help!

                1 Reply Last reply Reply Quote 0
                • T Offline
                  Teddy
                  last edited by

                  I testes the last days and after four reboots still no problems anymore.

                  Looks like it was for the Gateway monitoring. I don't understand the connection between the problem and the monitoring, but tha most important is, that it just works! 😃

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.