NAT on 27 net not working



  • Hi,
    I want to use NAT outbound for HTTP/HTTPS/ICMP packet from the LAN net to the WAN net.

    This is the infrastrutture:

    TestVM:
    OS: CentOS 7
    IP: 192.168.106.5/27
    GW: 192.168.106.2

    If i try to ping google.com the packet are lost (below the tcpdump):

    PfsenseVM:
    Pfsense = 2.3.2-RELEASE-p1 (amd64)
    IP LAN: 192.168.106.2/27
    IP WAN: 95.xxx.xxx.xxx
    GW WAN: 95.xxx.xxx.xxx

    NAT Rules:

    FW LAN Rules:

    FW WAN Rules:

    Any tips?

    Best Regards,

    Update 1: Fix typo


  • LAYER 8 Global Moderator

    IP LAN: 192.168.106.2/24

    So your network is a /24 - but you put the mask on the device in that same network as /27??  Yeah that is borked!!  That is not how you do it..  If your network off pfsense is /24 then all devices in that network would use the same mask..

    You can use the different cidr in your firewall rules and such.. But overall this is borked!!

    192.168.106.2/24 – 192.168.106.5/27



  • Oh it's a typo on writing this post, the ip is 192.168.106.2/27.


  • LAYER 8 Global Moderator

    Well there there is nothing wrong.. Where did you do that sniff showing traffic to 216.58.205.46?  On the client sending the traffic or pfsense lan interface?

    Maybe you just didn't get an answer?  Sniff on your wan - did the syn go out your wan with your public IP?



  • Hi johnpoz,
    I try to send ICMP request to google.com from TestVM:

    Capture on WAN: I can see only DNS forward request, no ICMP request / reply.
    Capture on LAN: Show only DNS request.

    All capture is on promiscuous mode.


  • LAYER 8 Global Moderator

    "Capture on LAN: Show only DNS request."

    So you don't even see the icmp.. If your not seeing icmp getting to pfsense lan - then its never going to go out wan..

    Your sure pfsense is set at your gateway on your testvm?  I don't see any B hits on any of your lan rules..  Can you access pfsense web gui from your testvm?



  • Your sure pfsense is set at your gateway on your testvm?
    Yes, the route show is on first post.

    Can you access pfsense web gui from your testvm?
    Yes, below more details.


  • LAYER 8 Global Moderator

    What VM software you running on - there is some stickies on having to do some settings on some of them..


Log in to reply