PSense problem with a private wan network

frank · Sep 24, 2008, 11:39 AM

Hi all,

I'm new to PFSense. I've installed without problems. Here after is my network diagram
My external network isn't connected to Internet. I've just setup the ip address as static on the wan interface. The gateway and ip address are the same.

external WAN 120.1.0.0/16 <- 120.1.1.1 –-----PFSENSE ------- 100.1.2.1 -> LAN 100.1.0.0/16
|
|
OPT1 138.1.253.253 ->138.1.0.0/16

First : a ping between LAN and OPT1 works great
Second : ping beetween machine on LAN and OPT1 network and WAN interface works great
I don't understand why a ping beetween 120.1.1.1 (WAN PFSENSE interface) and a machine with 120.1.1.2 ip address don't go

Have you any ideas, on how to enable this and permit some traffic between external network and local networks ?

Thanks

Frank

GruensFroeschli · Sep 24, 2008, 2:57 PM

Did you create a rule on the WAN that allows traffic?
How did you test from the WAN?
What was the default gateway of the testmachine on the WAN?

Is it intentionally that you have public IP's on your OPT and LAN?

frank · Sep 24, 2008, 3:32 PM

Yes i have created a rule -> On WAN Interface the rule is : TCP * * LAN Net * *

For my test, i have a switch who has 2 ports connected, 1 for the WAN interface and a pc. The gateway of testmachine is 120.1.1.1, @ip of the pfsense wan interface

Yes it is intentionaly, because we are on an private network without outside connections.

Sincerly

Frank

GruensFroeschli · Sep 24, 2008, 6:22 PM

A ping is ICMP.
Your rule only allows TCP.

frank · Sep 25, 2008, 6:47 AM

yes, i know

I've setup this rule : ICMP * * LAN Net * * on WAN Interface and this on LAN interface ICMP LAN net * * * *

Nothing go throught WAN interface. Any ideas ?

Frank