Block traffic from opt0 to lan



  • Hi,
    i need to block the trafic from the opt0 (is an access point controlled by captive portal/radius) to the LAN (office network), every rules i've tried doesn't worked, how can i do this?
    i also need to control (via ssh) a specific ip in the opt0 network from the LAN, but i wasn't able to do this.
    Actually seems that the port 80 and only the 80 can go from opt0 to LAN.
    Can someone help me?



  • Rules go on the interface where the traffic originates, and are evaluated top down, so post your rules from the OPT interface (I guess it is OPT1 - pfSense does not make an OPT0).