Rule Processing between "lan" and multiple "opt" interfaces

[magilli]

Hello, I have a question around the pfsense rules….. I have 1 wan interface Lan and several opt interfaces. The "Lan" has servers and the "OPT1" has workstations. The rules are pretty simple so far, allow 3389, 53 into the lan from opt, OPT to ftp and the web but there alot of ports open.

I did some more digging... this is what I found. The rules act just as I would suspect, but as soon as I add a rule to allow the workstations web access 80 and 443 to * it opens up all of the ports between the workstations and servers... Am I applying the rules the wrong ???

Thanks

[Cry Havok]

Please provide screenshots of the rules and details of the IP address ranges (including netmasks) you're using on each interface.