OPT1 Firewall Rules
-
First off, OPT1 t is enabled. It is set for /24. Insofar as the logs go there are quite a few, even too many.
Yes, I did enable dhcp. -
@turku31 so what do the logs show???
-
Exactly lets see your rule set.. Lets see a log entry that you feel is wrong, or don't understand. What is not working exactly?
Do you have any rules in floating tab? These rules if set to quick would be evaluated before rules on the interface. If you are trying to block traffic.. If you have a state open already before you put in a block you would need to either wait for that state to time out, or kill it before your block would take effect.
Without some details, its not really possible for anyone to help you figure out what is not working the way you want it to work.
-
The simple answer is I have tried every option available, and none is able to connect to the Internet, short of Any, which would defeat the purpose.. And since the video link I posted, instructs you to choose OPT1.NET as the Source, it's not possible to do so if it doesn't exist.
Pardon my lack of knowledge regarding all this, but I will have to study what you've provided to gain a better understanding of what I can/should do to remedy it all.
I greatly appreciate your response. -
I tried posting all the logs but it was perceived as spam and it wouldn't let me.
-
@turku31 post a screenshot. You try and post some wall of text - yeah most likely it will think its spam.. Or link to it if you post it somewhere else, etc.
choose OPT1.NET as the Source, it's not possible to do so if it doesn't exist.
Dude no offense but how dense are you trying to be.. It was changed from net to subnets.. Its the same freaking thing!
As to not being able to get to the internet - the internet is vast amount of IPs.. How would you think you could allow them all specifically or even in net blocks.. The internet is ANY as a destination.. If you want to block access to X, then create that rule before you ANY rule that allows access to the internet.
-
Bunk utube videos have you down the primrose path to nowhere. Other than these forums and here
https://docs.netgate.com/pfsense/en/latest/index.html and here https://www.youtube.com/NetgateOfficial/videos. there is no better place to get you started. none.
Does your version of PF Sense have a question mark in the top right corner or a help pull down.
The question mark will take you to the relevant gui page of PF Sense book. Help will take you to the PF Docs. -
@Uglybrian said in OPT1 Firewall Rules:
the primrose path to nowhere
hahaha - nice, I might have to steal that in the future ;)
-
All has been resolved. I thank you all for your advice.
-
@turku31 so what was it? Nice to leave what you found as the problem, to possibly help the next guy out.