Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problem getting to websites - via NAT Qwest modem

    Scheduled Pinned Locked Moved General pfSense Questions
    3 Posts 2 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R Offline
      root2020
      last edited by

      I have a site-A and a site-B.
      Site-B working just fine with an openvpn server and it is using PPPoE to authenticate, the modem is in bridge mode.

      On the site-A, the pfsense box is in a DMZ via the DSL modem. That was the only thing I changed on the modem. The modem has a static IP on its WAN side and forwarding everything to a private IP on the pfsense WAN port. There is a VPN tunnel between the two and that is working 100%. The problem is that site-A web browsing stinks and pages timeout all of the time. Some web pages you just plain cannot reach. I have full firewall logging on and everything is going out free and clear. I believe the problem is due to the double NAT. Internet pipe is 7 megabit connection on site-A.

      What are my options? I notice on the qwest DSL that I can disable NAT and I can enable dynamic routing. What can I do to get this working by keeping the NAT on the modem?

      1. I know I can reconfigure and use PPPoE on pfsense and bridge the router. (I am scared to do this because last year I was using 2.0 RC2 on this box and it kept dropping the internet when using PPPoE. That is why I am even NATTED in the first place. I just upgraded it to 2.0.1 last night.
      2.
      3.

      1 Reply Last reply Reply Quote 0
      • C Offline
        cmb
        last edited by

        Highly unlikely it's because of double NAT in itself. My first guess given it's DSL and with that description is you probably need MSS clamping to a lower value on the modem, it should have that configurable somewhere.

        1 Reply Last reply Reply Quote 0
        • R Offline
          root2020
          last edited by

          Thanks, I will look into that.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.