Firewall blocking LAN Traffic



  • Halo,
    I made a clean install (2.2.1_x86),
    set up the ports,
    added login data for PPPoE
    and it worked fine.

    Until the next day. From now on traffic from LAN to WAN is blocked.
    DNS-resolution works, but I can't get in the internet.

    Some minor changes fix the problem until the next day.
    E.g. enabling SSH-Server or even changing SSH-port make it work again for some time.

    I'm running a totally default configuration:  PPPoE-WAN –- pfSense --- LAN
    No additional firewall rules, addons or something else.
    The only special about my configuration is, I have some additional NIC's installed.
    I want to use them later for WLAN, DMZ. For the moment they are not configured.

    Does anyone has an idea what's going wrong?


    Oliver S.
    ISLE GmbH, Ilmenau.


  • Banned

    Hi!

    Could you be little more specific on "I can't get to the internet". Error messages? Logs?

    Is your gateway up while trying? Have a look at the logs if apinger (gateway monitoring) is going mad.

    What is the rule blocking the outbound traffic (shown when you click on the white/red cross button to the left of the blocked traffic)?

    Is it out-of-state traffic?

    Regards

    chemlud



  • Did you incorrectly define a gateway for your LAN?  Interfaces - LAN - IPv4 Upstream Gateway should be blank.



  • I configured nothing except the PPPoE login data.
    Sorry, in my original post where some screenshots.

    See here:
    https://www.dropbox.com/sh/ydib4t3q7i747lx/AAApSMk_lDxx7sn7APhKXQqXa?dl=0

    When I ping an URL, the ping get the correct ip address but nothing more. As you can see in the log, everything is blocked.
    IPv4 Upstream Gateway = none


  • Banned

    Hi again!

    But from your first post I got that it is working for some time (one day?) before everything is blocked.

    What is the rule blocking the traffic? What does the states table look like? Has the PPPoE been disconnected by the provider over night? Is it re-established correctly afterwards?

    Does reloading the firewall rules help?

    Maybe erase the "allow all" rule and create it freshly to see if the traffic comes back.

    Maybe some kind of hardware issue?


  • Banned

    @ollixx77:

    I configured nothing except the PPPoE login data.
    Sorry, in my original post where some screenshots.

    If you configured nothing but the PPPoE WAN and are having inexplicable issues, then ditch the setup and start from scratch. Otherwise, post the actual interfaces configuration screenshots.



  • Added tables, LAN, WAN interface settings and complete config file:
    https://www.dropbox.com/sh/ydib4t3q7i747lx/AAApSMk_lDxx7sn7APhKXQqXa?dl=0


Log in to reply