<![CDATA[Pfsense Router, but still want to limit access like ACL]]>I want to use a pfsense box as a router. I am handed off an usable ip subnet of 63.xx.55.xx/24 but my router needs 63.xx.12.xx/30 for it's assigned IP. It all works fine and i can use all of my public ip's if i turn of packet filtering. Easy solution except i would really like to at a minimum be able lock down access to the box by certain IP's So i don't need any NAT or redirecting. Is there an easy way to do this?

]]>https://forum.netgate.com/topic/32120/pfsense-router-but-still-want-to-limit-access-like-aclRSS for NodeFri, 17 Apr 2026 22:30:03 GMTMon, 28 Mar 2011 21:45:01 GMT60<![CDATA[Reply to Pfsense Router, but still want to limit access like ACL on Fri, 01 Apr 2011 00:57:03 GMT]]>I did notice one problem with using the PFsense box as a router as described above. It does route traffic as expected and i can have my 1 or 2 rules to restrict access to the box except from my network, but apparently this breaks PPTP connections. I have and will have other firewalls behind this pfsense router and currently i am running another pfsense box behind it for my private network. I will have another for a DMZ network, and then i have other customer that will be behind it with their own firewalls. Kind of a bad thing if they won't be able to have vpn's. Haven't tried and FTP'ing yet to see if it will have a problem. I'm a little confused as to why it would have these problems since NAT is essentially off.

]]>https://forum.netgate.com/post/273098https://forum.netgate.com/post/273098Fri, 01 Apr 2011 00:57:03 GMT<![CDATA[Reply to Pfsense Router, but still want to limit access like ACL on Tue, 29 Mar 2011 17:02:12 GMT]]>Thank you for the reply. I have packet filtering enabled. Webconfig anti lockout rule off. configured outbound NAT like you said. And i have it working as expected.

]]>https://forum.netgate.com/post/272670https://forum.netgate.com/post/272670Tue, 29 Mar 2011 17:02:12 GMT<![CDATA[Reply to Pfsense Router, but still want to limit access like ACL on Tue, 29 Mar 2011 16:43:03 GMT]]>
  • Reenable the packet filter.
  • Enable "manual outbound rule generation" (firewall –> NAT --> Outbount)
  • Delete/Create outbound NAT rules according to your needs.
    --> Removing all outbound NAT rules will give you a purely routed setup with firewall capability.
    • ]]>    https://forum.netgate.com/post/272665https://forum.netgate.com/post/272665Tue, 29 Mar 2011 16:43:03 GMT    <![CDATA[Reply to Pfsense Router, but still want to limit access like ACL on Tue, 29 Mar 2011 16:29:41 GMT]]>Still nothing? I'm thinking there has to be a way to make this work, anyone….

    ]]>    https://forum.netgate.com/post/272660https://forum.netgate.com/post/272660Tue, 29 Mar 2011 16:29:41 GMT