Block 1 IP client while on LTE Wan Backup interface
-
@iptvcld Why would you think that some device on 192.168.1.x/24 would need to send traffic to pfsense to go to 192.168.1.y/24
A gateway is to get off a network, when a client wants to talk to an IP - oh that is on my network, arp and send it the mac address I get back.. When the IP is not on their network.. Oh need to send this my default gateway or some gateway I have a route for to get to that network.. Arp for the mac of that gateways IP and send the traffic to the gateway..
So yeah if your dns server was the same network as the device wanting to ask the dns server something, no it wouldn't send anything to pfsense the gateway/router to get off the network to some other network.
-
@johnpoz and is this a negative thing? If it does not need to pass through pfsense? Would the rules still be processed for the clients that are on the same network as the dns servers?
-
@iptvcld No the rule would never see traffic, it would never trigger.. Not sure what your not grasping that client doesn't send traffic to pfsense if the what it wants to talk to is on the same network as it..
Is it a negative thing? Lack of understanding the basic concept sure.. Traffic never gets sent to the gateway when devices talk amongst themselves on the same network.. Not grasping this concept leads to users creating rules that would never ever trigger and never be used.. When they do that and do not understand this concept, it leads to not understanding why something isn't working or is even though they are blocking it per how they think the rules work.. This is the big "negative" if you will.
-
@johnpoz understood, but this should be ok as the clients on the network where the dns servers are would just bypass pfsense for the purpose of resolving DNS. Once they resolve the address via DNS and need to exit in order to access the internet, they will come back to pfsense.
-
@iptvcld yeah.. To get off your local network, you have to talk to some router that will route that traffic for you - ie pfsense.
-
@johnpoz thanks again and sorry if it takes me a bit long to grasp. I enjoy playing with my home lab tech and I am learning a ton on the way from this community and people like you.
-
@iptvcld No problem - happy to help.. The only thing that gets frustrating sometimes, is man just answered the same exact question 3 days ago ;) does nobody know how to search a forum or even browse a few pages of threads... I get it sometimes understanding the search term can be a problem..
But I do not recall such a question, at least not any time recent..
So when you get a chance I would fully test that his works exactly how you want.. I would for example pull the plug on your pppoe connection and make sure your other clients work over your lte connection except for this one client your wanting to block..
