Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Wan-dmz bridge issues

    Installation and Upgrades
    1
    1
    626
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W
      wkk2 last edited by

      I have a very odd problem with a firewall (Dell R320, Intel Pro 1000VT, pfSense 2.0.3/amd64).  The internal Ethernet ports are disable and the Pro is configured for WAN, LAN, DMZ, OTHER.

      Other is connected to a local net so I have a back door.
      WAN is connected to a cable modem.
      LAN goes only to a switch (LAN-WAN does nat).
      DMZ goes to a switch with a server with a public address.

      The cable folks wouldn't give me two subnets so the DMZ and WAN ports could route.  They said they would but broke their promise at the install.

      So I have a bridge setup between the WAN and DMZ to use public addresses on both interfaces.

      Here is what happens from a remote location (home):

      ping from home to DMZ server box fails
      ssh from home to firewall public WAN port works
      ping from firewall to DMZ server works
      firewall arp -a shows the DMZ server's mac on the igb0 interface (WAN)

      arp on the DMZ server box shows the cable modem MAC and the WAN MAC (not the DMZ mac)

      ping from DMZ server to network destination works.  This seems to trigger something.

      Now ping from home to DMZ pc works.

      I suspect I am missing something in the bridge setup.

      1 Reply Last reply Reply Quote 0
      • First post
        Last post