Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    What are the parameters of firewall rules LAN | WAN net, LAN | WAN address?

    Scheduled Pinned Locked Moved Firewalling
    5 Posts 3 Posters 676 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bars
      last edited by

      Hello.
      What are the parameters of firewall rules LAN|WAN net, LAN|WAN address?
      I don’t understand what gets to LAN|WAN net, LAN|WAN address?

      johnpozJ M B 3 Replies Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @bars
        last edited by johnpoz

        @bars XYZ "net" would be the network that interface is attached to.

        If your IP of lan is 192.168.0.1/24, then the net would be 192.168.0.0/24

        If your IP on wan is 1.2.3.4/20 then the wan network would be 1.2.0.0/20 or 1.2.0.0 - 1.2.15.255

        The "address" is just that - the address assigned to that interface 192.168.0.1 or 1.2.3.4

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • M
          mer @bars
          last edited by

          @bars
          WAN Address parameter resolves to whatever IP your defined WAN interface gets (typically DHCP from upstream)
          LAN Address parameter resolves to whatever IP you assign to the interface named LAN.

          Ip addresses consist of an Address and a Netmask, so:
          WAN Net resolves to WAN Adress/WAN Netmask
          LAN Net resolves to LAN Address/LAN Netmask

          I was going to say if you need more concrete example there is plenty a quick internet search gives you but as is typical, @johnpoz has faster fingers than me this morning.

          1 Reply Last reply Reply Quote 0
          • B
            bars @bars
            last edited by

            @bars
            Understood nothing!
            What is included here?
            WAN net and WAN address?
            I know what a global and local area network is.
            I don’t understand what the WAN net and WAN address are about.

            johnpozJ 1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @bars
              last edited by johnpoz

              @bars your wan would be how pfsense gets to other networks its not attached too. Normally this would be just a public internet IP. Or if behind a nating device from your isp, it could be just rfc1918 address..

              A wan is the network a router uses to get to other networks its not attached to..

              The wan net alias, is just that the network your "wan" interface is connected to. Yes the wan IP would be included in that alias, since it is the whole network that interface is attached to.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.