Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Firewall Rules

    Scheduled Pinned Locked Moved Firewalling
    5 Posts 3 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T Offline
      TheStig405
      last edited by

      I have spent all day Saturday unsuccessfully trying to configure a PFSense system.  Obviously, I must be doing something wrong.

      I need to set up a system that will support 2 seperate LANs that share the same WAN connection.  It is important for that the LANs not be able to talk to each other.  Basically one is secure and the other is the guest, unsecure.

      I tried playing with the firewall rules, but each time I was able to reach the secure LAN from the guest LAN.

      Any advice would be greatly appreciated.

      thanks

      1 Reply Last reply Reply Quote 0
      • chpalmerC Offline
        chpalmer
        last edited by

        Can you post a screenshot of your lan and opt rules?

        Triggering snowflakes one by one..
        Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

        1 Reply Last reply Reply Quote 0
        • chpalmerC Offline
          chpalmer
          last edited by

          Actually to make it easier…

          Have you made up a block rule between the guest lan and the primary lan and put it first in the list?

          attached is an example from one of my offices...  First rule and last rule are the important ones for you to see...

          officerules.JPG
          officerules.JPG_thumb

          Triggering snowflakes one by one..
          Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

          1 Reply Last reply Reply Quote 0
          • P Offline
            podilarius
            last edited by

            I have my guest open to !LAN Subnet. I just like that I had to only create one pass rule to rule them all. It still blocks access to LAN, but I don't have to create any other rules or worry about order. On locations with multiple LAN, I have an alias or two that is used on the pass rule.

            1 Reply Last reply Reply Quote 0
            • T Offline
              TheStig405
              last edited by

              Thanks for advice.  I won't have an opportunity to try implementing PF Sense again for a week.  I will follow up if I get stuck again.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.