Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsense-router doesn't show up in traceroute

    Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
    15 Posts 5 Posters 18.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jimpJ
      jimp Rebel Alliance Developer Netgate
      last edited by

      If you use policy routing, pf takes the traffic and sends it out the WAN selected for that connection - it does not stop on the pfSense box as a hop.

      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      1 Reply Last reply Reply Quote 0
      • K
        krisken
        last edited by

        @jimp:

        If you use policy routing, pf takes the traffic and sends it out the WAN selected for that connection - it does not stop on the pfSense box as a hop.

        Strange, because before pfsense did show up at the traceroute?

        1 Reply Last reply Reply Quote 0
        • I
          inflamer
          last edited by

          Hi Krisken,

          you would need to add a reverse record (PTR) in your local DNS server for 10.2.0.1 which is resolvable from the PC you are running traceroute on, in order for having the pfsense hop appear as rtr-fw01.office.it2go.eu [10.0.0.1]. Since the 192.168.100.1 hop appears as wifi.office.it2go.eu [192.168.100.1], it seems you already created a PTR record for this address.

          Andreas

          1 Reply Last reply Reply Quote 0
          • D
            dragon2611
            last edited by

            @inflamer:

            Hi Krisken,

            you would need to add a reverse record (PTR) in your local DNS server for 10.2.0.1 which is resolvable from the PC you are running traceroute on, in order for having the pfsense hop appear as rtr-fw01.office.it2go.eu [10.0.0.1]. Since the 192.168.100.1 hop appears as wifi.office.it2go.eu [192.168.100.1], it seems you already created a PTR record for this address.

            Andreas

            It should still show as an ip address even if the RDNS doesn't resolve.

            Mine shows up, but then i'm not presently using multi-wan for anything.

            1 Reply Last reply Reply Quote 0
            • K
              krisken
              last edited by

              All,

              Any idea what option i did checked/non-checked so that my pfsense router don't show up? 
              I think that's the first part of the problem :)

              Kris

              1 Reply Last reply Reply Quote 0
              • D
                dragon2611
                last edited by

                @krisken:

                All,

                Any idea what option i did checked/non-checked so that my pfsense router don't show up? 
                I think that's the first part of the problem :)

                Kris

                Jimp seems to be suggesting it's because of policy based routing, which may explain things as mine isn't setup to do any policy based routing and is showing up.

                1 Reply Last reply Reply Quote 0
                • I
                  inflamer
                  last edited by

                  @dragon2611:

                  @inflamer:

                  Hi Krisken,

                  you would need to add a reverse record (PTR) in your local DNS server for 10.2.0.1 which is resolvable from the PC you are running traceroute on, in order for having the pfsense hop appear as rtr-fw01.office.it2go.eu [10.0.0.1]. Since the 192.168.100.1 hop appears as wifi.office.it2go.eu [192.168.100.1], it seems you already created a PTR record for this address.

                  Andreas

                  It should still show as an ip address even if the RDNS doesn't resolve.

                  Mine shows up, but then i'm not presently using multi-wan for anything.

                  In that case I misunderstood, I thought the problem was that 10.1.0.1 was showing up without hostname, but I see now that he is expecting 10.0.0.1 to show up, while it isn't.

                  A

                  1 Reply Last reply Reply Quote 0
                  • E
                    eri--
                    last edited by

                    It is correct that pfSense will not show up when used with PBR.
                    Not sure a fix should be done for this or not!

                    1 Reply Last reply Reply Quote 0
                    • jimpJ
                      jimp Rebel Alliance Developer Netgate
                      last edited by

                      An FAQ entry should be enough. I'll add one. I don't think it's worth coding a fix to make it show up.

                      EDIT: FAQ added: http://doc.pfsense.org/index.php/Router_is_Missing_from_traceroute_Output

                      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                      Need help fast? Netgate Global Support!

                      Do not Chat/PM for help!

                      1 Reply Last reply Reply Quote 0
                      • K
                        krisken
                        last edited by

                        @jimp:

                        An FAQ entry should be enough. I'll add one. I don't think it's worth coding a fix to make it show up.

                        EDIT: FAQ added: http://doc.pfsense.org/index.php/Router_is_Missing_from_traceroute_Output

                        So if i do understand it all well, that's quite normal and there isn't a solution for it?
                        I tought that my pfsense router did show up in the beginning that i use pfsense.

                        Kris

                        1 Reply Last reply Reply Quote 0
                        • jimpJ
                          jimp Rebel Alliance Developer Netgate
                          last edited by

                          If you use normal routing, it does show up.

                          If you use policy routing (e.g. selected a gateway in a rule, typically for multi-wan) then it does not show up.

                          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                          Need help fast? Netgate Global Support!

                          Do not Chat/PM for help!

                          1 Reply Last reply Reply Quote 0
                          • K
                            krisken
                            last edited by

                            @jimp:

                            If you use normal routing, it does show up.

                            If you use policy routing (e.g. selected a gateway in a rule, typically for multi-wan) then it does not show up.

                            http://krisken.dommel.be/pfsense/rules.jpg
                            So like that…isn't possible?

                            1 Reply Last reply Reply Quote 0
                            • jimpJ
                              jimp Rebel Alliance Developer Netgate
                              last edited by

                              If you always had gateways set on every rule like that, then pfSense shouldn't have ever shown up as a hop when tracing outbound.

                              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                              Need help fast? Netgate Global Support!

                              Do not Chat/PM for help!

                              1 Reply Last reply Reply Quote 0
                              • K
                                krisken
                                last edited by

                                @jimp:

                                If you always had gateways set on every rule like that, then pfSense shouldn't have ever shown up as a hop when tracing outbound.

                                It has always been like that indeed.  So probably i'm wrong :)
                                Thanks for the great help!

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.