Rule check
-
home user network
I added an additional lan today, but was having some issues with devices being redirected to cyberghost vpn on each lan not being able to access the oher lan properly, all seems okay now but are these rules ok?
Could I consolidate the cyberghost rules with an inverted destination !lanx ?
-
So you have hosts in the alias CyberghostClients that are present on both LAN and LAN2?
That's a little odd but should work.
What you have there looks fine. What, exactly, isn't working?
Please be specific. We'll need to talk about specific IP addresses that cannot reach specific IP addresses. You probably don't need to be concerned about hiding details of your inside network.
-
Regarding blocking kids based on a scheckule you should pass according to a schedule followed by a block any, but that is a separate issue probably. If that is working for you, great.
-
Thanks for the tips, it seems to be working okay thanks, I just wanted to make sure that I had not made any home networking security faux pas really.
Re the cyberghost alias, yeah I just added to the existing rather than create a separate one and it does seem to be okay.
The issue I had been having was the clients within the cyberghost alias on each lan could not communicate properly with the other lan presumably because they were being forced through the cyberghost gateway.
To solve this I added an additional cyberghost rule above the existing ones with the respective lans as the destination and no forced gateway which seems to have cured the problem.
-
The need to bypass policy routing is expected:
https://doc.pfsense.org/index.php/Bypassing_Policy_Routing
