Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Disable NAT/Firewall?

    Scheduled Pinned Locked Moved Firewalling
    6 Posts 3 Posters 35.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      Hayvosh
      last edited by

      Hello,

      I have a question, I currently got a pfSense server running multiwan to get my internetspeed boosted.
      However, I don't like the NAT/Firewall in pfSense at all.

      And here's my question, I have a Cisco firewall I'd like to use instead like this :

      INTERNET โ€“-> pfSense server for multiwan (NAT/FW off) ----> Cisco Firewall ----> LAN

      Question is how i set up the pfsense server to get this working, I only want the pfsense server to do the multiwan thing and nothing else and let the cisco fw do the rest.

      Help/guide/tutorial is greatly appreciated!
      layout.jpg
      layout.jpg_thumb

      1 Reply Last reply Reply Quote 0
      • H
        Hayvosh
        last edited by

        No one that has a clue about this?ย  ???

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          You can't do multi-wan with the firewall off.

          Multi-WAN requires functionality in pf to handle the gateways and policy routing.

          You can turn off NAT, but you'll still need the firewall functionality on - you could use pass all rules if you don't want to block anything.

          Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • H
            Hayvosh
            last edited by

            Yeah, how do I do that then? I want the pf to handle as little as possible but to maintain multiwan

            1 Reply Last reply Reply Quote 0
            • jimpJ
              jimp Rebel Alliance Developer Netgate
              last edited by

              You disable NAT by going to Firewall > NAT, switch to manual outbound NAT, and delete all of the rules.

              As for the firewall rules, on the WAN tab you can add a pass all rule (any protocol, any source, any destination) and on the LAN side you just need rules that pass/direct the traffic into the gateway groups/load balancer pools

              Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

              Need help fast? Netgate Global Support!

              Do not Chat/PM for help!

              1 Reply Last reply Reply Quote 0
              • N
                Nachtfalke
                last edited by

                To disable NAT, you should go to:
                Firewall - NAT - Outbound and then "Manual Outbound NAT rule generation (AON - Advanced Outbound NAT)" with no rules. This disables NAT.

                I am not sure, if Multi-WAN works without firewall rules, because in the firewall rules you enter which gateway should be used. But you can create rules on every interface "Pass * * * * GW:Multi-WAN"

                Then you have to enter static routes on your routers or enable a routing protocol like RIP or OSPF.

                โ€“- edit ---
                I am typing to slow ;)

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.