Failover to 3G problems

erixon

Hallo.
I want to use my 3g modem as failover to my adsl line, but can't getting it to work.
Under interfaces / PPPs i have added my 3g modem. I can see under interfaces that the 3g modem getting an external ip, so i guess that it's ok.
Under System / Routing i have 2 gateways :

3G WAN2 10.64.64.0 195.67.199.28 Interface 3G Dynamic Gateway
WAN (default) WAN 90.XXX.XXX.XXX 195.67.199.27 Interface WAN Dynamic Gateway

And under System / Routing / Groups

FailOver 3G Tier2
WAN Tier1

Under Status / Gateways i see this:

3G 10.64.64.0 195.67.199.28 Online Interface 3G Dynamic GatewayOnline

WAN 90.xxx.xxx.x 195.67.199.27 Online Interface WAN Dynamic GatewayOnline

Under Firewall / Rules / LAN i have 3 rules

ID Proto Source Port Destination Port Gateway Queue Schedule Description

* * * LAN Address 22 * * Anti-Lockout Rule
80
443
* LAN net * * * * None Default allow LAN
to any rule

* * * * * FailOver *

I must miss something?. When i disable my adsl, my internet connection is lost

Sorry for bad english.

GruensFroeschli

The rules are processed from top to down.
If a rule catches, the rest below is never considered.
Since you have an "allow all" rule above your rule using the balancer….. ;)

erixon

Thank you, now it's working :-)

marcogi

@GruensFroeschli:

The rules are processed from top to down.
If a rule catches, the rest below is never considered.
[…]

I thought it were the last matched rule to "win". I mean, the rules are all processed from top to down, the last rule matching the packet, catches it.
So, what does the 'Apply the action immediately on match' in the rule editor do?

I'm asking to clarify myself how pfsense works.

Thanks

GruensFroeschli

On which page do you see this option?

The only place i can find the string "Apply the action immediately on match" is for the trafficshaper.

This is about firewall / NAT rules

jimp

@marcogi:

@GruensFroeschli:

The rules are processed from top to down.
If a rule catches, the rest below is never considered.
[…]

I thought it were the last matched rule to "win". I mean, the rules are all processed from top to down, the last rule matching the packet, catches it.
So, what does the 'Apply the action immediately on match' in the rule editor do?

I'm asking to clarify myself how pfsense works.

Thanks

Floating rules are different. Floating rules can either have quick checked to be top-down, or unchecked to be last-match-wins. Floating rules are not used by most people, and are mostly used for traffic shaping.

On every other tab, the rules are processed top-down.