offloading OpenVPN using external gateway
-
@bingo600 Yes but the rules is matched because it is logged in the pfsense firewall log.
It only is ignoring the gateway in advanced settings....
The same rule in "floating" mode is working... -
This is really strange, now again the floating rule is not working.
I will try to reboot pfsense.... -
@chrispazz said in offloading OpenVPN using external gateway:
This is really strange, now again the floating rule is not working.
I will try to reboot pfsense....Noooooo
Don't say you're using floating rules , i asked about that -
@bingo600
I was NOT using floating rules at all.I tried now to see the same rule in floating mode if it works with raspi gateway or not and with floating IT IS working.....
Why in floating mode use the specified gateway and in normal not floating mode ignores it?
-
This post is deleted! -
It shouldn't
But AFAIK floating rules are always parsed first. -
@bingo600 Should I open a bug in pfsense?
-
@chrispazz
Not yetI think one of the mods / gurus should review this thread first.
@stephenw10 @johnpoz
Any words here -
I don't hope we have been bitten by NAT
The policy rule rule was on a LAN ingress interface , looking at the HOST Source IP of the iMAC. And the Logging showed a match.Technically the source IP is later being set to the pfSense WAN IP, but the new gateway ought to have been set before that.
I'm officialy confused
I do hope your policy rule was the top most rule , and that you didn't have any rules before that on that interface , else we'we been chasing ghosts all night.
A permit ICMP any any before the policy rule would have made that "ghost"
/Bingo
-
@bingo600 eheheh
Yes, the policy rule is the first one on that interface.
-
I tried some other tests but no luck. I am officially unable to apply that gateway
