Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    One way access between two subnets

    Scheduled Pinned Locked Moved Firewalling
    5 Posts 2 Posters 636 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      lovingHDTV
      last edited by

      I have a 1 and 10 subnet.  They both work fine, but I would now like to restrict some access.  My 10 subnet if for IOT and Guests.  I don't want them to have access to the 1 subnet at all.  Additionally I want anyone on the 1 subnet to have full access to the 10 subnet.

      I was able to block access to a specific address 192.168.1.1 (the router) with a rule, I then added pass rule on the 10 subnet that says: for IPV4, any source, any port,  Desitnation !LAN net.  I thought this would only pass traffic out that is not headed to my LAN (subnet 1).  But it doesn't seem to do anything.  I can easily get to my file server, which is what I don't want.

      Do I need to add a block, any, any, destination 192.168.1.0/24, I kind of thought that is what the previous one did.

      thanks,
      david

      1 Reply Last reply Reply Quote 0
      • KOMK
        KOM
        last edited by

        1)  Clear your states after you make a rule change.  Existing states will continue to function even if blocked by rule.

        2)  Post up a screenshot of your rules so we can see what you're really doing.

        3)  Try to avoid using negate operators.  If you don't want them to access your LAN, put a block right at the top to prevent it.

        1 Reply Last reply Reply Quote 0
        • L
          lovingHDTV
          last edited by

          Here is what it looks like today:

          it does block 192.168.1.1, but that is all.  If I change the last rule to a block evertying to the LAN net, then nothing works.  I can't even ping my DNS.

          thanks for the quick response

          1 Reply Last reply Reply Quote 0
          • KOMK
            KOM
            last edited by

            Change your block rule from 192.168.1.1 to LAN network and change the protocol from IPv4 TCP to any.  Move it under your Plex rule.  Change your last access rule from ! LAN net to *.  Done.

            1 Reply Last reply Reply Quote 0
            • L
              lovingHDTV
              last edited by

              thank you!

              I never tried both of those changes.

              david

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.