@85 block drop in log quick all label "Default deny rule"

harritz3257

Hello.

Im running out of ideers, and hoping someone here can help me.

pfSense is located in 192.168.249.0/24, using 192.168.249.205 as gateway.

192.168.249.205 is a core switch with several vlans.

VLANS:
192.168.240.0 / 24 (gateway 192.168.240.205 (The same switch as 192.168.249.205)
192.168.242.0 / 24 (gateway 192.168.242.205 (The same switch as 192.168.249.205)
192.168.244.0 / 24 (gateway 192.168.244.205 (The same switch as 192.168.249.205)

On 192.168.249.205 is a 0.0.0.0 0.0.0.0 route to 192.168.249.64 (pfSense)

from 192.168.249.0 / 24 i can access all pages but from 192.168.240, 242 and 244 i CANT access 62.199.234.161 (www.turbestilling.dk)

Feb 5 10:05:18 LAN 192.168.242.106:1578 62.199.234.161:443 TCP:S
Feb 5 10:05:27 LAN 192.168.242.106 62.199.234.161 ICMP

I've attached alot of pictures.

I hope someone can help me.

Regards Michael

harritz3257

Attached picture of package drops.

Unavngivet.JPG_thumb

Unavngivet1.JPG_thumb

lan.JPG_thumb

harritz3257

Network typ.

Drawing1.jpg_thumb

harritz3257

WAN

wan.JPG_thumb

Perry

If it's only one site I would try Disable Hardware Checksum Offloading

harritz3257

@Perry:

If it's only one site I would try Disable Hardware Checksum Offloading

I just tried.. didnt help..

Still get the same error in the System log under Firewall.

Regards Michael

blak111

Your default allow rule on the LAN interface has the source set to only the LAN subnet. Change it to 192.168.128.0/17 or something that covers all of the networks that route through pfSense.

harritz3257

@blak111:

Your default allow rule on the LAN interface has the source set to only the LAN subnet. Change it to 192.168.128.0/17 or something that covers all of the networks that route through pfSense.

It worked.!! Your my savior!