[Solved] Problem to connect on same wan subnet

[RogerWallin]

Hi,

I cant find or see why i cant connect to my web server when my pc is on same ip subnet as the wan interface i have on pfsense.
It works from other subnet's but not from my own.
My version is 1.2.3-RELEASE

Any clou on that  ???

[wallabybob]

Since nasties come in from the WAN interface the default configuration blocks unsolicited connections from the WAN interface.

If someone is concerned enough about nasties from the Internet to install a firewall they are probably concerned enough about nasties to also prevent access to the management interface from the WAN side.

I suspect you will see your attempted access to the web GUI in the firewall log: Status -> System logs click on Firewall tab.

[chpalmer]

What subnet are you on? I.E. 24… 32... 16...

What kind of connection do you have?  Cable, DSL, Fiber, T-1...

I take it your webserver is behind your pfSense box and that your pc is not...

[RogerWallin]

Thanks for a fast reply m8's

I dont wont to connect to my web gui i need to have a pc outside to test the rules to inside where i have my
webserver and other stuff.

My isp is the swedish bbb with fiber to the house.
Iam not so good on the subnet as you wrote chpalmer more then that is 255.255.248.0 subnetmask and i have 5 dhcp ip's from my isp
where one is on the pfsense box and one on my pc with same subnetmask.

cheers m8's  ;D

[chpalmer]

are you provided by your ISP, more than one public IP address to your router?

is that IP address considered a NAT address? -

10.x.x.x

172.16.x.x

192.168.x.x

??

[stephenw10]

@RogerWallin:

I dont wont to connect to my web gui i need to have a pc outside to test the rules to inside where i have my
webserver and other stuff.

I take it then that you have setup port forwarding and an appropriate firewall rule to allow incoming port 80 requests on WAN to get to your web server on LAN?

Steve

[RogerWallin]

stephenw10 / chpalmer:
Yes thats correct (WAN->LAN) and when iam on om country house which is another isp with public adress its ok.
My isp at home provide me up to 5 public ip's and my WAN on pfsense has only one of those on same subnet (255.255.248.0).
So i have only one public ip address to my pfsense.

[stephenw10]

Sounds like you have a routing problem.
What device do you have connecting your pfsense box your PC and your ISP connection?
If you have a default path that routes packets to a router at your ISP it will then try to send them back down the same pipe. This often doesn't work. Hence from another ISP the routing is OK.

Steve

[RogerWallin]

@stephenw10:

Sounds like you have a routing problem.
What device do you have connecting your pfsense box your PC and your ISP connection?
If you have a default path that routes packets to a router at your ISP it will then try to send them back down the same pipe. This often doesn't work. Hence from another ISP the routing is OK.

Steve

Its a normal switch.
I am agree about routing problem..

[RogerWallin]

I have found why i could not connect when iam in the same subnet as my pfsense box is.
Made a look in my personal firewall in my laptop and found it was not allow to connect anything on same subnet  :D

Hint:
Dose who use Eset Smart Security and have same problem.
Uncheck ARP and DNS poisoning attack detection in advanced setup of your personal firewall on your pc. (Not in pfsense)

So many thanks for trying to help me with my problem guy's  ;D

[chpalmer]

That makes sense…  Glad ya got it working...