Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Firewall drops all traffic on OPT1 interface even though rules are in place

    Firewalling
    3
    3
    2116
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hendersonm last edited by

      I've used PFSense for a long time, but this is the first time I've ever had a LAN segement on OPT1.

      I've got two completely seperate networks on LAN and OPT1. The LAN segement is working perfectly, but the PFSense firewall is dropping ALL and EVERY traffic on the OPT1 interface, even though there are rules permitting certain traffic.

      OPT1 IP Address: 192.168.100.1 (OPT1 alias is MYFLO)

      Ping from client to PFSense firewall:

      PFSense firewall rules:

      Still dropping packets though:

      I'm so sure this is something so bloody obvious, but I can't see it for the life of me. This is 2.0-RC1 so if it belongs on the 2.0 board I apologise.

      1 Reply Last reply Reply Quote 0
      • AhnHEL
        AhnHEL last edited by

        Did you explicitly setup the ICMP Type in the firewall rule?  Its right underneath the Protocol once you select ICMP.  You will need Any or at least Echo Reply.

        AhnHEL (Angel)
        NYC

        4 *sense sites:
        Dell R210 II, Xeon 1230v2, 16GB RAM, 940/880 Mbps
        Dell R210 II, Xeon 1240v2, 8GB RAM, 940/880 Mbps
        Dell R210 II, Xeon 1220, 8GB RAM, 100/30 Mbps
        Dell 7010 Optiplex SFF, i5-3570, 16GB RAM, 100/30 Mbps

        1 Reply Last reply Reply Quote 0
        • C
          cmb last edited by

          @onhel:

          Did you explicitly setup the ICMP Type in the firewall rule?  Its right underneath the Protocol once you select ICMP.  You will need Any or at least Echo Reply.

          Correct, except Echo, not Echo Reply if you're allowing pings.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post