Server cannot get through OPT1 interface… firewall blocking?

[dieselfuelonly]

Played with this off and on and haven't been able to figure it out.  When I upgraded to the latest version of PFSense a while back, I started with a clean slate.  Was working fine before.

Now I can't get my server, connected to the OPT1 interface directly via a crossover cable to access ANYTHING, let alone ping the OPT1 interface.

I have a rule on the OPT1 interface's firewall that looks like:

Proto  Source  	 Port   Destination Port   Gateway
*  	 OPT1 net  	 *  	 ! LAN net  	 *  	 * 

As far as I understand, this grants the any machines on the OPT1 subnet the ability to access anything but the LAN subnet.

When I check the firewall logs after trying to ping the OPT1 interface (192.168.1.1) I can see that it is blocking all attempts from the server, as well as DNS requests.

Maybe I'm overlooking something obvious here… I'd really appreciate any help.

Thanks,

Dennis

[dieselfuelonly]

Anyone?  I just don't see how it would be blocking traffic when there is a rule there allowing it… and that rule looks almost exactly the same as the one on the LAN interface with the exception of not being able to access a certain subnet (in this case, the LAN subnet).

[nicorellius]

Have you tried removing this rule and creating one that allows all traffic to see if it works?  When I struggled with pfSense firewall rules, I usually found that when I started over and made more robust rules, I could track where my problems were.