• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

[SOLVED] giving WAN access to a single host

Scheduled Pinned Locked Moved Firewalling
3 Posts 3 Posters 397 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • C
    charvey
    last edited by Dec 23, 2017, 12:22 AM Dec 22, 2017, 5:50 AM

    I thought this would be a simple task. I have a single device on a subnet and I only want that single device to be able to access the WAN.

    I have attached my firewall table for that subnet. Notice the WAN pass rule passes nothing and the default block rule blocks numerous packets. All the blocked packets are for WAN ip addresses from 192.168.6.2.

    Why wouldn't typical internet traffic match the 3rd row?

    Thanks!
    rules.png
    rules.png_thumb

    1 Reply Last reply Reply Quote 0
    • V
      viragomann
      last edited by Dec 22, 2017, 8:52 AM

      WAN net is only the subnet your WAN address belongs to, resulting from the WAN address and the associated mask.

      If you want to open up Internet access the destination has to be any. When other subnets should not be allowed put them in an alias and set the alias at destination combined with the "invert" check.

      1 Reply Last reply Reply Quote 0
      • A
        AMizil
        last edited by Dec 22, 2017, 9:12 AM

        Hello

        The rule should be changed.

        WAN NET = WAN "NETWORK" ( entire subnet)
        WAN ADDRESS  = WAN  "IP"  Address

        Try to change destination of your rule (3rd row)  follows :  change destination  from WAN NET to  Any (*)  , as this is a basic FW rule to allow access to Internet.

        Add another rule bellow this one on LAN interface :

        Action Block
        Interface LAN

        Source *
        Protocol *
        Port *
        Destination *

        Adrian

        1 Reply Last reply Reply Quote 0
        3 out of 3
        • First post
          3/3
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
          This community forum collects and processes your personal information.
          consent.not_received