No internet access from DMZ

ashwiz

I know is a few threads like this on the forum, putting my experience in case helps someone else.

I added a new Nic in the box, added interface, set up DMZ. No internet access from DMZ. Devices inside the DMZ got IP's from the DHCP, can ping each other, but can't ping FW, can't ping out, no internet access.

I took another box. Moved Nics over. Fresh install of PF, Restore the same config. Correctly assigned the interfaces. Now on the new box even the LAN can't ping FW and LAN has no internet access. DMZ same, can't ping FW and no internet.

Realized must be something like an underlying config is interfering. Started removing all sorts of config and testing.

Found I had a QOS, Traffic Shaper, for the voip. Deleted this. Instantly everything worked perfect, all fixed.

If adding a DMZ (or second LAN), might need to remove any Traffic Shaper, then add back after.

All the Best ;-)