Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    I have no internet access to sites other than Google & youtube through pfSense?

    Scheduled Pinned Locked Moved General pfSense Questions
    12 Posts 5 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      Pagger
      last edited by

      Hello, i have this setup: Cable modem > Nic1 and then Nic2 > Switch > clients
      pfSense is running inside HyperV.
      HyperV network is set up as with 2 external switches, "LAN" and "WAN"

      pfSense is using both theese NIC's and LAN/WAN is setup on the correct one.

      pfSense is getting a 128.x.x.x IP on the WAN, LAN is setup 10.0.0.1.

      The rest of the pfSense setup is pretty basic, which to my understanding should give Internet acess?
      The thing is, pfSense (and client on the LAN aswell) can actually ping out, both IP's and host names, but when browsing the internet, I can't access anything other than Google or Youtube (steam and blizzard chat works aswell, could even launch up WoW)
      This seemed very weird to me, and after thinking about what could cause this my initial thought was maybe these sites use IPv6, and thus the problem is Ipv4 only, but I'm really not sure, since (correct me if i'm wrong) I wouldnt be able to ping ipv4 adresses then?
      When i initially thought that might be the issue, I was thinking what would be able to cause that, and it struck me: NAT
      So I went and looked at the NAT rules, and to my awe there were 2 default rules configered, and (again correct me if i'm wrong) it should work already by default?
      I have been reading alot of documentation, watching alot of videos, and googled alot of stuff theese past couple of days, thinking it would be awesome to learn alot of the stuff anyway, but i'm running out of data on my cellphone, so now I want to fix this ASAP :D
      I wanna say thanks if you made the time to read this, whether you have a solution or not, I sencerely appreciate it, and if you do have a (possible) solution please let me know.

      M S 2 Replies Last reply Reply Quote 0
      • M
        mateusscheper @Pagger
        last edited by

        I'm new at pfSense, but I would check my firewall logs and try to traceroute some sites from the webgui.

        Status > System Logs > Firewall
        Check if when you enter a link, it gets blocked (press F5 to update);

        Try "tracert insersitehere" from Windows CMD (traceroute if Linux);
        Try tracertoute from pfSense webgui itself: Diagnostics > Traceroute;

        You can disable the firewall to see if something works:
        System > Advanced > Firewall & NAT > Check "Disable Firewall"

        As I said, I'm new to pfSense, so if something does not work, we can try something else. :)

        1 Reply Last reply Reply Quote 0
        • P
          Pagger
          last edited by

          When disabling the Firewall, I also disable NAT, and I can't ping out no more, I can't watch videos on youtube or anything, basically no connection.
          So my best bet is that its the firewall blocking connections

          I tried getting the logs you asked for, aswell as posting my Firewall rules and Nat setup, hopefully this helps.
          I do see all the blocked connections, so I assume this is the problem, but I have no idea what is causing it.

          https://imgur.com/a/gr5CLUl

          I can try a tracert, but I assume it works, since I can ping out from both hosts on lan and pfSense.

          1 Reply Last reply Reply Quote 0
          • M
            mateusscheper
            last edited by

            Maybe you have to set a rule to allow connections from your router to pfsense and from pfsense to PCs.
            I have two: allowing everything on all ports to 192.168.1.3:80 (pfsense) and another rule saying the same, but to port 443. (I used easy rule)

            Try to tracert to sites that does not work to see if where the packages stops.

            1 Reply Last reply Reply Quote 0
            • P
              Pagger
              last edited by

              I have 1 rule on WAN, and one one LAN that should allow everything

              TraceRT don't seem to be a problem.
              https://imgur.com/a/v1DUHc6

              M A 2 Replies Last reply Reply Quote 1
              • M
                mateusscheper @Pagger
                last edited by

                I'm sorry, but I'm out of ideas. :(
                Let's wait for someone else.

                1 Reply Last reply Reply Quote 0
                • A
                  AndyC @Pagger
                  last edited by

                  @pagger said in I have no internet access to sites other than Google & youtube through pfSense?:

                  I have 1 rule on WAN, and one one LAN that should allow everything

                  TraceRT don't seem to be a problem.
                  https://imgur.com/a/v1DUHc6

                  Remove that WAN any/any rule. Go do that now.
                  From the nslookup output it seems you are not using pfsense for DNS. What does your DNS setup look like?

                  P 1 Reply Last reply Reply Quote 0
                  • P
                    Pagger @AndyC
                    last edited by

                    @andyc My DNS setup is is: 2 Windows DC's with DNS, one at 10.1.0.20 and the next et 10.1.0.21.
                    Clients are set to use those and primary/sencondary DNS, and both of the servers have 10.0.0.1 (pfSense LAN IP) set as a forwarder.

                    Do you want me to delete the file because it's bad practice, or because It's part of the problem?:p

                    M 1 Reply Last reply Reply Quote 0
                    • M
                      motific @Pagger
                      last edited by

                      @pagger because you’re using AD, your DNS is correct. Client machines use the AD DNS and that should forward to pfSense (so you can use things like pfBlockerNG).

                      1 Reply Last reply Reply Quote 0
                      • M
                        motific
                        last edited by

                        The block rule shows that it was dropping traffic from 10.0.0.1 to 10.0.0.24.

                        What have you got in system>routing and what packages are you running?

                        P 1 Reply Last reply Reply Quote 0
                        • P
                          Pagger @motific
                          last edited by

                          @motific Under Gateway i have DHCP and It shows my WAN IP, nothing is set under static rouges og Gateway groups.

                          I got the following services running:
                          Dpinger
                          Ntpd
                          Syslogd
                          Unbound

                          1 Reply Last reply Reply Quote 0
                          • S
                            saquibahmed42991 @Pagger
                            last edited by

                            @pagger i disable my WAN ipv6 and everything is solved .

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.