Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OPT1 Firewall Rules

    Scheduled Pinned Locked Moved Firewalling
    26 Posts 5 Posters 456 Views 5 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T Offline
      turku31
      last edited by

      First off, OPT1 t is enabled. It is set for /24. Insofar as the logs go there are quite a few, even too many.
      Yes, I did enable dhcp.

      U 1 Reply Last reply Reply Quote 0
      • U Offline
        Uglybrian @turku31
        last edited by

        @turku31 so what do the logs show???

        johnpozJ 1 Reply Last reply Reply Quote 0
        • johnpozJ Offline
          johnpoz LAYER 8 Global Moderator @Uglybrian
          last edited by johnpoz

          Exactly lets see your rule set.. Lets see a log entry that you feel is wrong, or don't understand. What is not working exactly?

          Do you have any rules in floating tab? These rules if set to quick would be evaluated before rules on the interface. If you are trying to block traffic.. If you have a state open already before you put in a block you would need to either wait for that state to time out, or kill it before your block would take effect.

          Without some details, its not really possible for anyone to help you figure out what is not working the way you want it to work.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 25.07.1 | Lab VMs 2.8.1, 25.07.1

          1 Reply Last reply Reply Quote 0
          • T Offline
            turku31
            last edited by

            The simple answer is I have tried every option available, and none is able to connect to the Internet, short of Any, which would defeat the purpose.. And since the video link I posted, instructs you to choose OPT1.NET as the Source, it's not possible to do so if it doesn't exist.
            Pardon my lack of knowledge regarding all this, but I will have to study what you've provided to gain a better understanding of what I can/should do to remedy it all.
            I greatly appreciate your response.

            1 Reply Last reply Reply Quote 0
            • T Offline
              turku31
              last edited by

              I tried posting all the logs but it was perceived as spam and it wouldn't let me.

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ Offline
                johnpoz LAYER 8 Global Moderator @turku31
                last edited by johnpoz

                @turku31 post a screenshot. You try and post some wall of text - yeah most likely it will think its spam.. Or link to it if you post it somewhere else, etc.

                choose OPT1.NET as the Source, it's not possible to do so if it doesn't exist.

                Dude no offense but how dense are you trying to be.. It was changed from net to subnets.. Its the same freaking thing!

                As to not being able to get to the internet - the internet is vast amount of IPs.. How would you think you could allow them all specifically or even in net blocks.. The internet is ANY as a destination.. If you want to block access to X, then create that rule before you ANY rule that allows access to the internet.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 25.07.1 | Lab VMs 2.8.1, 25.07.1

                1 Reply Last reply Reply Quote 0
                • U Offline
                  Uglybrian
                  last edited by Uglybrian

                  Bunk utube videos have you down the primrose path to nowhere. Other than these forums and here
                  https://docs.netgate.com/pfsense/en/latest/index.html and here https://www.youtube.com/NetgateOfficial/videos. there is no better place to get you started. none.
                  Does your version of PF Sense have a question mark in the top right corner or a help pull down.

                  Screenshot from 2025-10-10 14-06-34.png
                  The question mark will take you to the relevant gui page of PF Sense book. Help will take you to the PF Docs.

                  Screenshot from 2025-10-10 14-23-51.png

                  johnpozJ 1 Reply Last reply Reply Quote 1
                  • johnpozJ Offline
                    johnpoz LAYER 8 Global Moderator @Uglybrian
                    last edited by

                    @Uglybrian said in OPT1 Firewall Rules:

                    the primrose path to nowhere

                    hahaha - nice, I might have to steal that in the future ;)

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 25.07.1 | Lab VMs 2.8.1, 25.07.1

                    1 Reply Last reply Reply Quote 0
                    • T Offline
                      turku31
                      last edited by

                      All has been resolved. I thank you all for your advice.

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ Offline
                        johnpoz LAYER 8 Global Moderator @turku31
                        last edited by

                        @turku31 so what was it? Nice to leave what you found as the problem, to possibly help the next guy out.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 25.07.1 | Lab VMs 2.8.1, 25.07.1

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.