<![CDATA[Allow single ip to pass]]>Hello,

I am a noob with pfsense so please bear with me here…
I basically have a simple setup - i am allowing any to any for everything with the exception of using the pfBlocker to block all countries except US. Everything behind my FW is public (no private network at all) .. (webservers, etc)

Now i am trying to allow full access to a couple IP's from India for a developer i hired. I created a simple rule in WAN tab to allow any for that specific IP but he cannot get to the servers behind my pfsense box... Did I miss something here? (screenshot below - the rule is 3rd line down)

Any help here is appreciated!!  Thank you.

]]>https://forum.netgate.com/topic/42964/allow-single-ip-to-passRSS for NodeSun, 18 Oct 2026 00:47:05 GMTThu, 15 Mar 2012 22:14:20 GMT60<![CDATA[Reply to Allow single ip to pass on Fri, 16 Mar 2012 16:03:05 GMT]]>I see… I will give that a try.. thanks a lot.

]]>https://forum.netgate.com/post/325293https://forum.netgate.com/post/325293Fri, 16 Mar 2012 16:03:05 GMT<![CDATA[Reply to Allow single ip to pass on Fri, 16 Mar 2012 11:34:39 GMT]]>Kappler,

The rule is fine if you have only valid ips and routing but it will be overwrited by pfBlocker package.

Try to create a list on pfBlocker package with this ip on custom list and Allow inbound action.

Att,
Marcello Coutinho

]]>https://forum.netgate.com/post/325265https://forum.netgate.com/post/325265Fri, 16 Mar 2012 11:34:39 GMT<![CDATA[Reply to Allow single ip to pass on Fri, 16 Mar 2012 08:40:06 GMT]]>If you want this guy to reach servers on your local network, you will have to create both port forwarding rules and associated firewall rules.

  • Andreas
]]>https://forum.netgate.com/post/325252https://forum.netgate.com/post/325252Fri, 16 Mar 2012 08:40:06 GMT<![CDATA[Reply to Allow single ip to pass on Fri, 16 Mar 2012 02:06:16 GMT]]>attached here..
Thx

pf1.PNG
pf1.PNG_thumb

]]>https://forum.netgate.com/post/325222https://forum.netgate.com/post/325222Fri, 16 Mar 2012 02:06:16 GMT<![CDATA[Reply to Allow single ip to pass on Fri, 16 Mar 2012 02:03:01 GMT]]>I'm not seeing your screenshot.

Can you attach it using post advanced options ?

]]>https://forum.netgate.com/post/325221https://forum.netgate.com/post/325221Fri, 16 Mar 2012 02:03:01 GMT<![CDATA[Reply to Allow single ip to pass on Fri, 16 Mar 2012 01:59:10 GMT]]>Sorry, just to be clear, if i understand this correctly it is already before the WAN country blocks as it is in the screenshot above… (it is the one that has the 1.38.24.8 ip listed)
Are you saying that it should be at the bottom below all the country blocks to work? Sorry, for the confusion, i just want to be sure i understand this.. I have been searching the wiki but cant find any docs on this simple thing.. :)

Thank you!

]]>https://forum.netgate.com/post/325220https://forum.netgate.com/post/325220Fri, 16 Mar 2012 01:59:10 GMT<![CDATA[Reply to Allow single ip to pass on Fri, 16 Mar 2012 01:49:59 GMT]]>Yes, first rule match.

]]>https://forum.netgate.com/post/325218https://forum.netgate.com/post/325218Fri, 16 Mar 2012 01:49:59 GMT<![CDATA[Reply to Allow single ip to pass on Fri, 16 Mar 2012 01:44:39 GMT]]>Hmmm… did i get this backwards?
I was thinking that the ones on top are first and down from there consecutively...
Thx

]]>https://forum.netgate.com/post/325217https://forum.netgate.com/post/325217Fri, 16 Mar 2012 01:44:39 GMT<![CDATA[Reply to Allow single ip to pass on Fri, 16 Mar 2012 01:31:41 GMT]]>You may need to apply this Allow rule before any wan/country block rule.

]]>https://forum.netgate.com/post/325213https://forum.netgate.com/post/325213Fri, 16 Mar 2012 01:31:41 GMT