Cannot get Internet access on Lan network

xrozix

Hi everyone,

I just installed pfsense 2.1.3 on my pc. but i can't get internet work on lan netwok.
i set gateway on wan adapter to my router ip . my router have a ip public. my wan adapter have ip public to.
my isp give me 5 ip public.
my pfsense box can get to internet but my lan network not work.

Here is my network topology

thank in advance

Gertjan

Hi,

Can you list your Firewall => Rules => LAN page ?

xrozix

this my lan firewall rules

thank you

Gertjan

Looks good, is exactly what I have.

I presume a ping from your pfsens box to i.e. google.com works.
ping from your PC, using domain google.com and it's IP:
ping 74.125.228.174

Use on of these:
google.com has address 74.125.228.174
google.com has address 74.125.228.160
google.com has address 74.125.228.161
google.com has address 74.125.228.162
google.com has address 74.125.228.163
google.com has address 74.125.228.164
google.com has address 74.125.228.165
google.com has address 74.125.228.166
google.com has address 74.125.228.167
google.com has address 74.125.228.168
google.com has address 74.125.228.169

The gateway on your PC is 192.168.0.254 - right ?
You can ping 192.168.0.254, right ?

Btw: why not using 192.168.0.254/24 ? (instead of your /16)

johnpoz

"i set gateway on wan adapter to my router ip my wan adapter have ip public to. my isp give me 5 ip public."

Well your gateway would be your ISP then not your "modems" IP that is one of the 5?

You sure this is a "modem" in front of pfsense - or is it doing NAT?

xrozix

thanks Gertjan, its work now, the problem because i use google dns server, when i change to pfsense ip, i can conect to internet.

@johnpoz : yes my gateway is isp.

thanks all

johnpoz

"the problem because i use google dns server, when i change to pfsense ip, i can conect to internet."

That is not a problem, your lan rules allow you to talk outbound on 53 udp, so you clearly should of been able to use google dns. Now possible your isp blocks access outbound on dns? But what dns you use has little to do with actually connectivity.

Either you had connectivity or you don't - some client not able to resolve www.something.com is not lack of internet access, etc.