Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Possible bug?

    Scheduled Pinned Locked Moved General pfSense Questions
    4 Posts 3 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Steve Mustafa
      last edited by

      I found something pretty strange today.

      Setting up the rules correctly, I still wasn't able to ping between two completely independent subnets, connected to the pfsense box. Until I bridged them, but once I unbridged them, they still work.  Rules work properly, since one of the subnets is the DMZ, I cannot access the LAN from there but certainly the other way around (again, as per the rules)

      ASCII art:

      WAN –------ PFSense ----------LAN 192.168.1.0/22
                              |
                              |
                              ---------------DMZ 10.0.0.0/24  (I refer to this as the Orange subnet)

      rules:

      LAN

      Proto   Source Port Destination   Port   Gateway   Schedule
      *          LAN net    *    Orange net  *          *

      Orange

      Proto   Source Port Destination   Port   Gateway   Schedule
      *          LAN net    *    Orange net  *          *

      Of Course, the subnets are defined as Aliases and they're right.

      TIA

      1 Reply Last reply Reply Quote 0
      • GruensFroeschliG
        GruensFroeschli
        last edited by

        Your rule on the DMZ interface doesn't make much sense.
        (LAN-subnet as source on an interface without LAN-subnet IPs).
        Also did you reset the states between tests?

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • S
          Steve Mustafa
          last edited by

          Sorry for the incredibly late reply, but by the time you answered I had left the office and then the next day I had surgery. 
          So sorry.

          For some odd reason, if both rules are not in place, traffic will not move between the networks. I tried that till I got googly-eyed becaue I found it baffling.

          No, I didn't reset the tables, but on Saturday (first day I get back to work) I'll be sure to try it then.

          Cheers.

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            When you make a bridge, it is not fully destroyed until you reboot, even if you disable it in the GUI.

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.