Strange VPN Kill Switch Problem
-
At the bottom of my LAN firewall wall rules i have IP4 block of all protocols, ports and interfaces. This is what I use as a VPN kill switch. Above it is a rule that allow VPN "A" to grant internet. If the VPNs ever go down then the box should lose internet. This works at stopping internet on the WAN interface. The problem is that under some conditions, I notice some VPNs granting Pfsense box internet even though there is no rule to allow them to get through. I am not sure what causes this.
-
@ryu945 If the rule is the last rule, it doesn't do anything, because everything which is not allowed is blocked anyways by default. A killswitch has to be designed differently.
-
@bob-dig What approach would you take?
-
@ryu945 Make sure the following under System - Advanced - Miscellaneous is checked like shown:
Then place a block rule right below the rule with the vpn gateway.
And turn off automatic gateway under System - Routing - Gateways.
-
-
@johnpoz said in Strange VPN Kill Switch Problem:
That would be the other solution but is more prone to user error and I had to much open states with it if I recall correctly.
You can also combine both to be really secure.
