[Solved]first pfsense and strange behaviour
-
Hello all :D,
So i have installed my first PFsense on a ESXi host, with only 1 NIC and i configured it like this :See attachement
So PFSense on WAN, bridged to OPT1 where my servers will live.
from internet i can access my debian server on OPT1 (ssh, apache2, ftp…)
but my server cannot ping (ping 8.8.8.8 result in 100% packet loss) or resolve any url (cannot resolve address)
So i guess i must have missed something...I just made the minimal rules on PFSense :
OPT1 : PASS IPv4 from any to any BUT LAN
WAN : PASS IPv4 from any to OPT1 net
PASS IPv4 from OPT1 net to anyI just dont see what i missed (i'm a newbie with VMW and pfsense) and a server that cant download a package or access a url is less useful :-
So please if u have an idea of where i went wrong, any hint will help...![clean VM-network.png](/public/imported_attachments/1/clean VM-network.png)
![clean VM-network.png_thumb](/public/imported_attachments/1/clean VM-network.png_thumb) -
Here are some ping testing from PFsense Packet Capture insterface (protocol ICMP only)
Capture from Interface OPT1
12:38:59.891058 IP IP-FO-Server1 > 8.8.8.8: ICMP echo request, id 4204, seq 1, length 64 12:39:00.898531 IP IP-FO-Server1 > 8.8.8.8: ICMP echo request, id 4204, seq 2, length 64 12:39:01.906502 IP IP-FO-Server1 > 8.8.8.8: ICMP echo request, id 4204, seq 3, length 64 12:39:02.914502 IP IP-FO-Server1 > 8.8.8.8: ICMP echo request, id 4204, seq 4, length 64 12:39:03.922424 IP IP-FO-Server1 > 8.8.8.8: ICMP echo request, id 4204, seq 5, length 64 12:39:04.930410 IP IP-FO-Server1 > 8.8.8.8: ICMP echo request, id 4204, seq 6, length 64 12:39:05.938376 IP IP-FO-Server1 > 8.8.8.8: ICMP echo request, id 4204, seq 7, length 64 12:39:06.946329 IP IP-FO-Server1 > 8.8.8.8: ICMP echo request, id 4204, seq 8, length 64
Capture from WAN
12:39:41.751302 IP IP-FO-PFSense > 8.8.8.8: ICMP echo request, id 2017, seq 4, length 64 12:39:41.760281 IP 8.8.8.8 > IP-FO-PFSense: ICMP echo reply, id 2017, seq 4, length 64 12:39:41.760302 IP 8.8.8.8 > IP-FO-Server1: ICMP echo reply, id 4205, seq 4, length 64 12:39:42.751243 IP IP-FO-PFSense > 8.8.8.8: ICMP echo request, id 2017, seq 5, length 64 12:39:42.760257 IP 8.8.8.8 > IP-FO-PFSense: ICMP echo reply, id 2017, seq 5, length 64 12:39:42.760278 IP 8.8.8.8 > IP-FO-Server1: ICMP echo reply, id 4205, seq 5, length 64 12:39:43.751228 IP IP-FO-PFSense > 8.8.8.8: ICMP echo request, id 2017, seq 6, length 64 12:39:43.760213 IP 8.8.8.8 > IP-FO-PFSense: ICMP echo reply, id 2017, seq 6, length 64
So WAN receive the response but it doesnt make it to OPT1
-
Just tested with Advanced=>Firewall/Nat=>Disable all packet filtering and I suddenly can connect to the outside world… So its definitively a rule somewhere and i really need to find it....
-
::) So while trying about everything i put the NAT Outbound Rule back on auto and… everything works fine.... :-[
I didn't even remembered I had changed it... Morality : check and recheck everything before complaining....