• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Firewall Rules not working

Scheduled Pinned Locked Moved Firewalling
22 Posts 2 Posters 1.9k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • Y
    yupq6wlc79ts
    last edited by Dec 25, 2018, 3:16 PM

    Yes, OpenVPN.

    (sorry for late reply, since I am a new user with no reputation, I have to wait 120 seconds before I can reply, lol)

    K 1 Reply Last reply Dec 25, 2018, 3:18 PM Reply Quote 0
    • K
      Konstanti @yupq6wlc79ts
      last edited by Konstanti Dec 25, 2018, 3:20 PM Dec 25, 2018, 3:18 PM

      @yupq6wlc79ts
      NordVpn Openvpn client setting
      Check this option

      0_1545751042363_b7aef87c-8d9d-42fa-83fb-6188aa62e0a4-image.png

      1 Reply Last reply Reply Quote 0
      • Y
        yupq6wlc79ts
        last edited by Dec 25, 2018, 3:21 PM

        It wasn't checked. I checked it and tested the device by enabling the rule, No Internet on that device.

        K 1 Reply Last reply Dec 25, 2018, 3:22 PM Reply Quote 0
        • K
          Konstanti @yupq6wlc79ts
          last edited by Konstanti Dec 25, 2018, 3:31 PM Dec 25, 2018, 3:22 PM

          This post is deleted!
          1 Reply Last reply Reply Quote 0
          • Y
            yupq6wlc79ts
            last edited by Dec 25, 2018, 3:29 PM

            0_1545751773900_Screenshot from 2018-12-25 09-25-02.png

            K 1 Reply Last reply Dec 25, 2018, 3:31 PM Reply Quote 0
            • K
              Konstanti @yupq6wlc79ts
              last edited by Konstanti Dec 25, 2018, 3:32 PM Dec 25, 2018, 3:31 PM

              @yupq6wlc79ts
              all right now.
              check nat / outbound for wan interface
              0_1545751927509_56e731d7-694f-4179-a10d-15926003de4c-image.png

              1 Reply Last reply Reply Quote 0
              • Y
                yupq6wlc79ts
                last edited by Dec 25, 2018, 3:33 PM

                0_1545751994300_nat outbound.png

                K 1 Reply Last reply Dec 25, 2018, 3:34 PM Reply Quote 0
                • K
                  Konstanti @yupq6wlc79ts
                  last edited by Konstanti Dec 25, 2018, 3:35 PM Dec 25, 2018, 3:34 PM

                  @yupq6wlc79ts
                  Here is and mistake
                  no nat rule for wan 192.168.1.0/24
                  It is necessary to add

                  1 Reply Last reply Reply Quote 0
                  • Y
                    yupq6wlc79ts
                    last edited by Dec 25, 2018, 3:36 PM

                    The reason was, It kinda acts as a kill switch. If the VPN goes down, no devices will be able to connect to the internet.

                    But my 5 devices aren't on VPN, so they should still be connected. What do I need to add/change here?

                    K 1 Reply Last reply Dec 25, 2018, 3:39 PM Reply Quote 0
                    • K
                      Konstanti @yupq6wlc79ts
                      last edited by Konstanti Dec 25, 2018, 3:43 PM Dec 25, 2018, 3:39 PM

                      @yupq6wlc79ts
                      Add a nat outbound rule for the 192.168.1.0/24 on the wan interface as I showed in the picture
                      and 5 devices will be able to access the Internet via wan
                      Do not delete anything

                      1 Reply Last reply Reply Quote 1
                      • Y
                        yupq6wlc79ts
                        last edited by yupq6wlc79ts Dec 25, 2018, 3:44 PM Dec 25, 2018, 3:43 PM

                        Tada!

                        @Konstanti - Thank you so much. That worked. I think I get now what you were saying earlier (no nat rule for wan), makes sense now that I get it. Lol.

                        Appreciate it.

                        So now, for each device I want to connect to WAN, I'll have to manually add the entry in the Firewalls - Rules? Any way I can combine all 5 of them in 1?

                        K 1 Reply Last reply Dec 25, 2018, 3:47 PM Reply Quote 0
                        • K
                          Konstanti @yupq6wlc79ts
                          last edited by Dec 25, 2018, 3:47 PM

                          @yupq6wlc79ts
                          It is possible to allocate them in a separate subnet ( as I have done)
                          or create an alias firewall / alias ( write there all 5 ip)
                          and then use the alias in the rule as a source.
                          Then the rule will be one

                          1 Reply Last reply Reply Quote 1
                          22 out of 22
                          • First post
                            22/22
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                            This community forum collects and processes your personal information.
                            consent.not_received