I have 2 networks 192.168.1.0/24 and 192.168.2.0/24 that are connected with routers over a private t1.
I need 192.168.2.0 to access a specific network 22.214.171.124/24 but my pfsense is blocking 192.168.2.0/24 from reaching it.
The firewall log show it being blocked by the default rule.
The 192.168.2.0 network has access to all other computers on the 192.168.1.0 network.
the 126.96.36.199 network is an private network handled by a vpn box.
Please draw a diagram.
I get these messages in the firewall log when trying to traceroute the network.
Sep 16 15:37:57 LAN 192.168.2.114 188.8.131.52 ICMP
Sep 16 15:37:52 LAN 192.168.2.114 184.108.40.206 ICMP
Sep 16 15:37:48 LAN 192.168.2.114 220.127.116.11 ICMP
More infos please.
Screenshots of firewall rules, did you create an allow-rule for this traffic, how do you test, what are you trying to access, is the 18.104.22.168/24 subnet behind the 172.16.0.2 router,
what is the default gateway of your clients, what is the default gateway of each router, etc.
Yes I created rules. At least I think i did. Yes the 22.214.171.124 network is behind the 172.16.0.2 vpn box.
Im trying to access a private network. The 192.168.1.0 network can reach it with no problem.
Default gateway of the 192.168.1.0 network is the 192.168.1.1 pfsense firewall. The 192.168.2.0 network gateway is 192.168.2.1 firewall for its own internet connection.
See rules screenshot below.
No other help? Is more information needed?
The screenshot of your firewall rule shows as destination 126.96.36.199/26.
The diagram in the first post shows as destination subnet 188.8.131.52/24.
If you try to ping 184.108.40.206 this is in the
and NOT in the 220.127.116.11/26
One thing i dont understand:
Why do you have the "source 192.168.2.0/24, destination "lan-subnet" " rule on the LAN tab?
It has to go to the interface on which traffic with as source 192.168.2.0/24 comes in.
Not sure was just trying anything to diagnose where the problem might be.
I went and changed the /26 to /24 for 18.104.22.168. I will retry.
Ok I got everything working. I had to add a static route in pfsense to the 192.168.2.0/24 network. I also added some rules on the DMZ tab for the 192.168.2.0/24 network to access it.
Thanks for your help GruensFroeschli.