Source: "Single Host or Alias" does not work for IPv4 outbound rules?
-
pfSense Plus: 22.05-RELEASE (amd64)
My PC's IP address on XXXXLAN_MAIN network is 192.168.xx.xx (redacted for privacy). I want a PBR rule routing certain subnets listed in the Destination alias XXXX_SUBNETS to another gateway.
The above rule does not work unless I set Source to XXXLAN_MAIN net as it shown below - specifying 192.168.xx.xx or an alias containing this IP doesn't work.
Any ideas?
-
@capitanblack said in Source: "Single Host or Alias" does not work for IPv4 outbound rules?:
192.168.xx.xx (redacted for privacy).
That entire network is unroutable. Save yourself the time editing images and... don't.
10.x.x.x/192.168.x.x/172.16.x.x-172.31.x.x are unroutable on the internet and mean nothing to us other than it helps us figure out what you're doing wrong.Please fix your post with un-redacted images.
-
J Jarhead referenced this topic on
-
J Jarhead referenced this topic on
-
My Ubuntu server - just to confirm. No proxy in browser no, other VPN running on server.. Nothing that could interfere the traffic.
-
When I specify /24 subnet for source - rule works just fine and sends traffic to a specific VPN gateway:
-
When I select the network name from drop-down - rule works fine too -
-
When I specify a single IP - rule does not work anymore and traffic goes to pfSense default gateway group .
-
-
@capitanblack So there's a LOT more to PBR than your firewall rule.
There's outbound NAT changes
The VPN type
Making sure you have the interface configured correctly.Diagnosing from a single set of snippets or a redacted single graphic is very much impossible.
You should start from the beginning: PBR. Why? VPN? Multi-WAN? What's the rule config look like? NAT settings?
We don't need encryption keys or passwords or usernames but you need to provide more detail up front.
-
@rcoleman-netgate said in Source: "Single Host or Alias" does not work for IPv4 outbound rules?:
@capitanblack So there's a LOT more to PBR than your firewall rule.
There's outbound NAT changes
The VPN type
Making sure you have the interface configured correctly.Diagnosing from a single set of snippets or a redacted single graphic is very much impossible.
You should start from the beginning: PBR. Why? VPN? Multi-WAN? What's the rule config look like? NAT settings?
We don't need encryption keys or passwords or usernames but you need to provide more detail up front.
I've edited my post. I just want send all IPv4 traffic form a single host on this LAN to Wireguard VPN gateway. Wireguard tunnels works just fine. I have the VPN gateway selected under Advanced for this PBR rule and the rest of values over there are set to default.
-
There's outbound NAT changes
The VPN type
Making sure you have the interface configured correctly.
You should start from the beginning: PBR. Why? VPN? Multi-WAN? What's the rule config look like? NAT settings?I've doublecheck everything and return to you.
Thanks a lot!