New firewall rule does not seem to work



  • I have two ports on my pfsense router that that I need to make sure one does not see the other. One port is a standard and the other port on the nic has two vlans. I have tried to create a rule on one of the vlan interfaces that blocks all the traffic coming from the "LAN" interface which is the other nic port. After adding and loading the rule I can still ping hosts on the VLAN from hosts on the LAN port.

    Can somebody step me through how to add in a rule that blocks all traffic in such a fashion?



  • The bottom rule is the one I've created that does not seem to work (it's still letting icmp through anyway) The blacked out is the vlan net name - intended for the entire vlan network.




  • Rules are evaluated top-down, so the rule above your block rule will allow everything.  Move your block rule to the top and change the Destination to the VLANs you need to block.



  • @KOM:

    Rules are evaluated top-down, so the rule above your block rule will allow everything.  Move your block rule to the top and change the Destination to the VLANs you need to block.

    Ah ok - that did it thanks!


Log in to reply