Pfsense Can't Pass traffic from its WAN port to host in LAN network
-
I have a topology that contains a VPS which is our production server another VPS which is a Pfsense firewall. I have created a local subnet 192.168.102.0/24 and the IP address of my production server is 192.168.102.2/24, the Pfsense has the IP address of 192.168.102.3/24 both have the gateway 192.168.102.1/24.
I have disabled the WAN NIC of my server and want to route all my traffic through the Pfsense firewall.
I also do port forwarding for allowing ssh from the internet and also added the rules but it is not working.
when I put tcpdump on the firewall I see the traffic which reaches LAN but the traffic does not reach my production server.
I also have the same issue when I tested the IPsec tunnel, packets from the other side reach to LAN interface of the firewall and do not cross it to the production server.
is there anyone that had the same issue with routing of traffic?
-
@haydar-rezaie said in Pfsense Can't Pass traffic from its WAN port to host in LAN network:
when I put tcpdump on the firewall I see the traffic which reaches LAN but the traffic does not reach my production server.
I rather think, the packets would reach the server though, but the server will send responses to the gateway instead of back to pfSense.
If you want to direct the whole upstream traffic to pfSense change the default gateway to the pfSense IP.
-
I have added an IPV4 subnet 192.168.102.0/24 using Hetzner panel and when I added resources to that subnet (my server and my pfsense firewall) automatically assigned IP of 102.1 as a gateway ( maybe it is a virtual SW that hetzner create it for further routing between different subnets) for both devices and it was not working fine after I changed the gateway of my server to 102.3 (IP of firewall) now connectivity is OK. and I also put tcpdump on my server but no packet reach my server when I am trying to reach it from the internet but i can ping 102.3 from 102.2 and vice versa.
from the internet, my packet reaches 102.3 and was stuck there.