Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Multi WAN, TO VM NAS with seperate Firewall

    Scheduled Pinned Locked Moved Routing and Multi WAN
    31 Posts 2 Posters 2.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jochenmehlich
      last edited by

      so i thing, something with the redirection is broke. (maybe the nat 1:1)?

      1 Reply Last reply Reply Quote 0
      • V
        viragomann
        last edited by

        You have not allowed ping on OPT1. Your rules only allow http and https. So you cannot see a ping on LAN, cause pfSense blocks it.
        So either test with http or allow ping.

        1 Reply Last reply Reply Quote 0
        • J
          jochenmehlich
          last edited by

          firewall_rules_2.png
          now it should be allowed

          but there is no difference. No incoming ping in LAN and no incoming https.

          1 Reply Last reply Reply Quote 0
          • V
            viragomann
            last edited by

            Strange. Yes, it should work.

            What if you add a usual port forwarding rule to OPT1 instead of the 1:1 for that server?

            1 Reply Last reply Reply Quote 0
            • J
              jochenmehlich
              last edited by

              nothing will pass.

              no https response from the projectserver or the safeserver.

              V 1 Reply Last reply Reply Quote 0
              • J
                jochenmehlich
                last edited by

                is there any other method to make a firewall.
                it must not be efficient, it must only work.

                every vm must have its own rules and use its own public ip4 addresses.

                1 Reply Last reply Reply Quote 0
                • V
                  viragomann @jochenmehlich
                  last edited by

                  @jochenmehlich said in Multi WAN, TO VM NAS with seperate Firewall:

                  nothing will pass.

                  no https response from the projectserver or the safeserver.

                  No idea. That is straight forward.
                  I'd drop that installation and start from scratch.

                  1 Reply Last reply Reply Quote 0
                  • J
                    jochenmehlich
                    last edited by

                    i think thats the best method.
                    i will try it later - i have to sleep.

                    could you explain me, what i have to do?

                    1 Reply Last reply Reply Quote 0
                    • V
                      viragomann
                      last edited by

                      Just make a new installation of pfSense and configure it as you did before.
                      Sometimes anything go wrong and you cannot find any reason.

                      1 Reply Last reply Reply Quote 0
                      • J
                        jochenmehlich
                        last edited by

                        same issue like the installation from yesterday. Projectserver is reachable, Safeserver not ...

                        rules_wan.png rules_opt1.png rules_lan.png nat_11.png firewall_virtual_ip.png

                        1 Reply Last reply Reply Quote 0
                        • V
                          viragomann
                          last edited by

                          Did you exchange external and internal IPs now deliberately?

                          Suspect saying to have no access to Saveserver as Saveserver was before 172.16.0.3 and now it's 172.16.0.2 (forwarded from 144.76.93.234).

                          1 Reply Last reply Reply Quote 0
                          • J
                            jochenmehlich
                            last edited by

                            @viragomann said in Multi WAN, TO VM NAS with seperate Firewall:

                            Did you exchange external and internal IPs now deliberately?
                            Suspect saying to have no access to Saveserver as Saveserver was before 172.16.0.3 and now it's 172.16.0.2 (forwarded from 144.76.93.234)

                            yes it was deliberately, but it isnt working and i dont now why. im wondering, because the projectserver is always reachable.

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.