Possible bug?



  • I found something pretty strange today.

    Setting up the rules correctly, I still wasn't able to ping between two completely independent subnets, connected to the pfsense box. Until I bridged them, but once I unbridged them, they still work.  Rules work properly, since one of the subnets is the DMZ, I cannot access the LAN from there but certainly the other way around (again, as per the rules)

    ASCII art:

    WAN –------ PFSense ----------LAN 192.168.1.0/22
                            |
                            |
                            ---------------DMZ 10.0.0.0/24  (I refer to this as the Orange subnet)

    rules:

    LAN

    Proto   Source Port Destination   Port   Gateway   Schedule
    *          LAN net    *    Orange net  *          *

    Orange

    Proto   Source Port Destination   Port   Gateway   Schedule
    *          LAN net    *    Orange net  *          *

    Of Course, the subnets are defined as Aliases and they're right.

    TIA



  • Your rule on the DMZ interface doesn't make much sense.
    (LAN-subnet as source on an interface without LAN-subnet IPs).
    Also did you reset the states between tests?



  • Sorry for the incredibly late reply, but by the time you answered I had left the office and then the next day I had surgery. 
    So sorry.

    For some odd reason, if both rules are not in place, traffic will not move between the networks. I tried that till I got googly-eyed becaue I found it baffling.

    No, I didn't reset the tables, but on Saturday (first day I get back to work) I'll be sure to try it then.

    Cheers.


  • Rebel Alliance Developer Netgate

    When you make a bridge, it is not fully destroyed until you reboot, even if you disable it in the GUI.


Log in to reply