Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    [SOLVED] Suddenly no internet connection for clients

    General pfSense Questions
    3
    5
    914
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      sensori last edited by sensori

      Hi all,

      pfSense was running fine for some time in my home network. Yesterday I was doing some changes like updating pfSense to the newest version and installing squid and pfBlockerNG. I've also noticed on the dashboard that the WAN was set to only 100 mbit although the NIC supports 1000 mbit. Today I've changed that too after several attempts.

      I have no idea what happened but the problem now is that my clients, one linux machine and one windows machine, don't have internet access. I have stopped pfBlockerNG and squid and set back the 100 mbit value for the WAN but it didn't help. I've also followed the guide:
      https://www.netgate.com/docs/pfsense/routing/connectivity-troubleshooting.html
      and found this applies to my case:

      *Test NAT: Try to ping 8.8.8.8 (Diagnostics > Ping) using LAN as the Source Address

      If this fails but the other tests work, then the problem is likely Outbound NAT (See the WAN/LAN gateway checks above)*
      I found 2 automatic rules in Firewall > NAT > Outbound that don't know what they mean. In any case I tried to disable the outbound NAT but that didn't help too.

      Any ideas what is going on?

      1 Reply Last reply Reply Quote 0
      • stephenw10
        stephenw10 Netgate Administrator last edited by stephenw10

        If your WAN was set to 100Mbps and it was working previously then it may need to be set to that to get link with whatever it's connected to.

        What does Status > Interfaces show for the WAN?

        What was the result of that ping test? Did it fail with LAN as source but succeed with WAN as source?

        Make sure you have your WAN set as the default gateway in System > Routing.

        Steve

        1 Reply Last reply Reply Quote 0
        • JKnott
          JKnott last edited by

          @sensori said in Suddenly no internet connection for clients:

          I've also noticed on the dashboard that the WAN was set to only 100 mbit although the NIC supports 1000 mbit.

          You don't normally set that. Autonegotiation determines the appropriate rate automagically. Perhaps you should be asking why it's only 100 Mb. A bad cable is a good bet. In fact, by trying to set it, you may cause problems, if the other end is set to autonegotiate.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          1 Reply Last reply Reply Quote 0
          • S
            sensori last edited by sensori

            @stephenw10 , @JKnott : thanks for the responses!

            @stephenw10 :

            What does Status > Interfaces show for the WAN?

            0_1544529663921_pfSense_Interfaces_Forum.png

            What was the result of that ping test? Did it fail with LAN as source but succeed with WAN as source?

            Yes!
            Also from a client I can ping 192.168.2.1 (pfSense LAN) and even 192.168.1.20 (pfSense WAN) but I can't ping 8.8.8.8.

            Make sure you have your WAN set as the default gateway in System > Routing.

            It is already.

            @JKnott:

            You don't normally set that. Autonegotiation determines the appropriate rate automagically. Perhaps you should be asking why it's only 100 Mb.

            autoselect doesn't work. I'm getting a red x. I've set 1000 mbit and it looks like it's accepted. (see picture above).

            A bad cable is a good bet.

            I've replaced the cable but the problem remains.

            I'm thinking about resetting to factory defaults. Any other ideas?

            [EDIT]
            I've found the culprit...
            It was pfBlockerNG. I saw that in the Filter Reload its rules were still there. I thought that by disabling the pfBlockerNG Server in the dashboard is the same as by disabling it in Firewall > pfBlockerNG, but apparently it isn't. Now I'll either remove pfBlockerNG or try to reconfigure it.

            1 Reply Last reply Reply Quote 0
            • stephenw10
              stephenw10 Netgate Administrator last edited by

              Ah, that can do it if there are unpopulated tables in the ruleset. pf cannot load and hence there is no NAT.

              Steve

              1 Reply Last reply Reply Quote 0
              • First post
                Last post