Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    New installation strange behavior - I can access web interface. however, I can't ping to the device

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    22 Posts 4 Posters 2.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JeGrJ
      JeGr LAYER 8 Moderator
      last edited by

      @popeel-SSH said in New installation strange behavior - I can access web interface. however, I can't ping to the device:

      Pfsense do not do that as we might need to find the rule and delete that.

      Nope, just think about stateful rules work. It doesn't block at once if you add a block rule and have a working connection state established. BUT if that state expires/gets closed it blocks any new attempt. But you can also see that it works the other way round:

      • add a block ICMP rule for your internal IP only so you cannot ping pfSense' LAN interface
      • save and apply ruleset
      • start a ping on your desktop
      • disable the block rule
      • hit apply
      • wait a moment ... ha! pings start!
      • now enable the block again
      • hit apply
      • -> ping continues, as the "state" for icmp allows that ping to continue. Open up another window and run a ping there - oops, no ping! but the other still continues!
      • close second window
      • cancel the continuous ping in window 1
      • ping again - oh no ping! (as the state has "expired" or more specific, the "new" ping can't create a state anymore as it is blocked now)

      So with it going from "no ping" to "ping" that's your case: it was reloaded and activated immediatly. Other way round it was also active but you could only see that in the second window, as the first one had an active unexpired state. :)

      Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

      If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

      1 Reply Last reply Reply Quote 2
      • P
        popeel-SSH
        last edited by

        @JeGr said in New installation strange behavior - I can access web interface. however, I can't ping to the device:

        no ping" to "ping" that's your case:

        Thanks and it does explain everything .... You are a star.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.