Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Rules help with no internet access

    Firewalling
    2
    7
    1864
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      Mr.Fw last edited by

      Hello,

      I have a pfsense firewall with 4 nics.
      I tried to set some basic rules for one of the networks,
      functioning as a Web servers DMZ.

      I did managed to connect with the DNS server thats located in my ISP (WAN).

      the problem is i couldn't get any internet access…

      I've attached a picture of the rule table for that interface.

      Please Advise Me  ???

      p.s for the attached picture:
      "Mailer" is a mail server located inside the IIS_DMZ network.
      "Databaser" is a sql server located outside this network (connection working)
      "ExternalDMZ" is 2 dns servers belong to my ISP

      Thanks!

      1 Reply Last reply Reply Quote 0
      • D
        danswartz last edited by

        What does 'no internet access' mean?  No web access?  If so, the rule for that is wrong, I think - it is referencing the WAN address, shouldn't it be '*'?

        1 Reply Last reply Reply Quote 0
        • M
          Mr.Fw last edited by

          yep - no web access…

          the "web access rule" i've tried to achieve is from inside the network to any wan address..

          Have i did it wrong?

          1 Reply Last reply Reply Quote 0
          • D
            danswartz last edited by

            Like I said, I think the destination needs to be '*' (any address.)

            1 Reply Last reply Reply Quote 0
            • M
              Mr.Fw last edited by

              thanks for the help! :)

              if i do that like you said, wouldn't it be able to connect with other networks besides WAN as well?

              1 Reply Last reply Reply Quote 0
              • D
                danswartz last edited by

                I wasn't aware that was your issue.  If it is, put other rules in that block it from going to LAN or wherever and put those before the rule that allows http anywhere else.

                1 Reply Last reply Reply Quote 0
                • M
                  Mr.Fw last edited by

                  Thank  You!

                  You've been very helpful  :D

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post