Request time out

yellowhat89

i'm sorry if it's repost…
But i experience problem with my LAN...

My LAN can't PING any website and to my modem (WAN Address), the result is Request time out.

But I can connect to the site and modem via browser...
can anyone explain me what happen to my network...
I guest this is because the Rules or the subnet, but I don't know how to make my LAN can Ping the WAN...

for additional my LAN Address using 192.168.1.0/27 and my WAN 192.168.0.0/30
I'm installing squid. and make Firewall ==> Rules like this

Please help me figure it out…
thanks...

GruensFroeschli

You dont have any rule allowing pings.

Read up how the firewall rules work.
You have redundant rules on LAN and WAN.
(Hint: The WAN rule does nothing for the LAN).

yellowhat89

I've found the solution about the ping problem, thank you for your guidance.

on LAN, I add one rule that allow ICMP, did I do right thing there?

so do you mean, that i should not make any rule for WAN?
i hope you can reply it, i'm sorry I'm very noob here…

GruensFroeschli

Traffic is only processed by a rule on the interface on which packets arrive.
You have a rule on your WAN with as "source" "lan subnet".
Since on the WAN never a packet from the LAN will arrive, this rule is unneccessary.

yellowhat89

actually, I read a tutorial on Dual Wan and The Rule is like that I used now.
But Now I disable it, and my network run just fine…

I've more several question again, I hope anyone don't mind answer it.
1. Do you think that the rule will work if I using 2 WAN (WAN + Opt1)? from your explanation i guest it's not.

2. Do you think that it's necesary that I anable UDP port on LAN Rules?
I don't know why the firewall block some traffic that use UDP Proto, but my network still working fine. So I decide to not allow UDP port on my LAN. what do you think about it?

GruensFroeschli

Can you post the link to this tutorial? Because this is plain wrong.

For if the rule will work: as it is right now: no
read the multiwan howto on the wiki http://doc.pfsense.com
–> yes you cancreate a rule that works for multiwan.

If you want to allow udp purely depends on your needs.
Are you using any software which requires udp?

yellowhat89

The link, I'll give you latter, but the tutorial is in Indonesian language, so I don't think that you want to see it… ;D

Yes, I am using some application that need UDP, but I've made the rule for it. But what about the other UDP port? It's danger if we pass all UDP port (any)?