[SOLVED] Access from LAN to DMZ(OPT1)

theboda · Mar 21, 2018, 7:30 PM

No vpns at all on the systems.
The dmz IP is set on a /32

![Lan interface.png](/public/imported_attachments/1/Lan interface.png)
![Lan interface.png_thumb](/public/imported_attachments/1/Lan interface.png_thumb)
![dmz interface.png](/public/imported_attachments/1/dmz interface.png)
![dmz interface.png_thumb](/public/imported_attachments/1/dmz interface.png_thumb)

johnpoz · Mar 21, 2018, 7:28 PM

Why would you be getting back that from .105? pfsense lan IP was .1 you stated.

LAN IGB1 192.168.1.1

Do you have some host routes setup on this lan box?

you sure your lan mask is /24 and not maybe say /22 or larger? Is this lan device windows box? If so post output of ipconfig /all and route print.

johnpoz · Mar 21, 2018, 7:31 PM

your /32 is BROKEN… Set that to /24 how it normally would be..

theboda · Mar 21, 2018, 7:34 PM

Set it to /24, still not working.
The laptop is a linux machine.
I don't have host routes set up, not that I know of.

johnpoz · Mar 21, 2018, 7:39 PM

well do a netstat -nr on it..

So you can see your routes… This will also validate what mask you have... When you ping you an IP on a different network you sure shouldn't be getting back from a different host

From 192.168.1.105 icmp_seq=1 Destination Host Unreachable

On your own network that is not your gateway that it can not get there.

theboda · Mar 21, 2018, 7:51 PM

here is my netstat output

johnpoz · Mar 21, 2018, 7:57 PM

your mask is /16 so 192.168.3 is on the same network… So no never going to sent traffic to pfsense to get there.

theboda · Mar 21, 2018, 8:19 PM

Thank you!! ::)

johnpoz · Mar 21, 2018, 8:20 PM

np - knew it had to be something silly.. If you would of been dhcp on the client never could of happened.

NogBadTheBad · Mar 21, 2018, 10:19 PM

Glad your sorted :)

BTW you have IPv6 track interface on your lan interface and no IPv6 firewall rules, if you dont use IPv6 disable it.