<![CDATA[Howto Block LAN Stations to communicate each other ?]]>Hello !

1.First of all my English is a bit poor , so i am sorry for that.

2.I am new to firewalling

My problem is :

I have a pfSense box in our corporate building. ( I Like it very much ). And i have a Subnet 192.168.0.0/16 on the lan side.
I want to block all Microsoft Network communication ( Printer Sharing, Document Sharing ) between the workstations, but i
have no success.

Please help !

pfSense 1.0-rc1 with Trasparent Squid. nothing else installed.

Attila

]]>https://forum.netgate.com/topic/1470/howto-block-lan-stations-to-communicate-each-otherRSS for NodeSat, 10 Oct 2026 14:37:06 GMTWed, 05 Jul 2006 09:30:09 GMT60<![CDATA[Reply to Howto Block LAN Stations to communicate each other ? on Fri, 07 Jul 2006 19:18:15 GMT]]>I know with Cisco switches you can setup a private VLAN where the isolated ports can only communicate with the promiscuous port(s).  For example you have two computers on two isolated ports, and pfsense connected to a promiscuous port, each computer can communicate with the pfsense box, but not with each other.

The router/pfsense doesn't really interact at all if the communicating computers are on the same subnet.

]]>https://forum.netgate.com/post/138624https://forum.netgate.com/post/138624Fri, 07 Jul 2006 19:18:15 GMT<![CDATA[Reply to Howto Block LAN Stations to communicate each other ? on Fri, 07 Jul 2006 14:44:34 GMT]]>I mean like linux eth1:1 eth1:2 eth1:3 .. etc…

]]>https://forum.netgate.com/post/138605https://forum.netgate.com/post/138605Fri, 07 Jul 2006 14:44:34 GMT<![CDATA[Reply to Howto Block LAN Stations to communicate each other ? on Fri, 07 Jul 2006 13:50:15 GMT]]>If you have a vlanswitch you can have multiple vlaned interfaces at one physical nic.

]]>https://forum.netgate.com/post/138603https://forum.netgate.com/post/138603Fri, 07 Jul 2006 13:50:15 GMT<![CDATA[Reply to Howto Block LAN Stations to communicate each other ? on Fri, 07 Jul 2006 13:47:01 GMT]]>Can i make virtual interfaces with pfSense ?

Attila

]]>https://forum.netgate.com/post/138602https://forum.netgate.com/post/138602Fri, 07 Jul 2006 13:47:01 GMT<![CDATA[Reply to Howto Block LAN Stations to communicate each other ? on Fri, 07 Jul 2006 11:38:05 GMT]]>Just add additional interfaces. Assign each interface a different IP from a different subnet. You then can control traffic between the subnets with the firewallrules.

]]>https://forum.netgate.com/post/138600https://forum.netgate.com/post/138600Fri, 07 Jul 2006 11:38:05 GMT<![CDATA[Reply to Howto Block LAN Stations to communicate each other ? on Fri, 07 Jul 2006 11:36:40 GMT]]>Ok then Thanks.

How can i make with pfsense multiple subnets ?

Attila

]]>https://forum.netgate.com/post/138599https://forum.netgate.com/post/138599Fri, 07 Jul 2006 11:36:40 GMT<![CDATA[Reply to Howto Block LAN Stations to communicate each other ? on Wed, 05 Jul 2006 12:27:40 GMT]]>This is not possible as this traffic doesn't pass the firewall. Only traffic leaving your local subnet will hit the pfsense. Traffic inside the local subnet is happening between the workstations directly.

]]>https://forum.netgate.com/post/138528https://forum.netgate.com/post/138528Wed, 05 Jul 2006 12:27:40 GMT