WAN Interface IP address - noob config question

NogBadTheBad · Aug 23, 2019, 7:59 AM

Try killing the firewall states.

johnpoz · Aug 23, 2019, 8:41 AM

And what are you outbound nat rules?

zzkazu · Aug 23, 2019, 10:24 AM

Automatic outbound NAT rule generation.

Is that sufficient?

johnpoz · Aug 23, 2019, 10:26 AM

let see it please
If you can ping from your public wan, but not from your lan - points to outbound nat not being correct.

I would sniff on your wan while your doing your ping from lan test.. Do you see the ping go out with your actual wan IP?

stephenw10 · Aug 23, 2019, 2:40 PM

Check the state table size on the dashboard also. Something breaking the ruleset can present like this but you would see 0 open states in that case. You have some rules showing open states so it's probably not that. Worth checking though.

Check you have a default route in Diag > Routes.

Steve

zzkazu · Aug 24, 2019, 1:28 AM

Thanks for the help here, learning lots.

Still can ping and resolve via WAN but not LAN

Only taking a guess but LAN active states seem closed, could that be the issue? I have reset states a couple of times.

using Packet capture (WAN side) cant see any private IP addresses...

thanks

Outbound NAT

johnpoz · Aug 24, 2019, 7:00 AM

Where is your default route?

That looks like your wan pinging your gateway.. But I see no default route in your routing table.. So if your client pings 8.8.8.8 why would it get routed out your internet?

Lets see your gateways

zzkazu · Aug 24, 2019, 8:50 AM

Default gateway IPv4 was set to automatic. Setting it to WAN_PPPOE seems to have allowed me to ping public via LAN now..

Seems a bit strange noting I have only one Gateway PPPoE.. ... cheers saved further headaches for me

johnpoz · Aug 24, 2019, 9:37 AM

I have seen a bit of strangeness with the automatic gateway selection.. Maybe your pppoe connection is taking awhile to come up.. Not sure.. I don't use those types of connection, and never a lot of experience even with them with pfsense..

We can see if anyone else with more info on the details of how the automatic selection is suppose to work, and how pppoe might come into play with that, etc.

Glad we finally got it sorted! ;)

stephenw10 · Aug 24, 2019, 1:15 PM

Yeah, I would recommend always setting the gateway to something specific there.

Steve