LAN Out problems
-
Hey Pfsense.
I'm trying to setup a firewall - which should contain my system protected within another network - så my setup is like this:WAN IP: 172.16.50.45 d gateway 172.16.50.1
LAN IP 192.168.0.1
LAN PC: 192.168.0.2I have 2 NICS in the system 1 LAN andf one Wireless.
I can get the wireless - connecting directly without any problem ( and gain access through the WIFI ( 172.16.50.XX IP) but from my LAN PC I'm not getting a connection through the firewall.
Actyually I googled all weekend without finding the rtight solution for this, but in the end I'm not getting allowed through.
Isn't it possible to allow all traffic from LAN to WAN without any rules???I've tried using both DNS forwarding/resolver without any success.
But I should still be able to get internet through the PFsense firewall - but that will not work.
The WAN interface would always be one a Private Network - since it would be the same setup allways.The important part is gaining access from LAN to WAN .
On the LAN
-
Do you have the option to block private addresses checked on your WAN interface? If so, uncheck it.
You have an RFC 1918 address on your WAN side. -
What do you mean you can not get connection through the firewall.. What are you trying to connect too, can you not resolve? You have resolver set to forwarder mode - what is it forwarding too. Can you access the web gui of pfsense? Can pfsense ping stuff on the internet or on the wan side?
-
What I mean - is the 3 machine I have on the LAN aren't allowed outgoing traffic - i Google etc
I can access the webgui - pfsense can ping on thge WAN interface
I have unchecked the RFC 1918 address option on the WANNormally I'll use Google's DNS - 8.8.8.8 og 4.4.4.4 as default DNS.
-
Did you edit the default any any rule? Did you mess with outbound nat? Did you put in a floating rule.. This is really out of the box a no brainer.. Click Click and away you go.
So do a traceroute to say 8.8.8.8
What do you get from one of your pcs, what does pfsense show in its traceroute?
Outgoing traffic to where, ping.. dns? you still have not answered the question can a PC resolve anything.. Do a ping command does the machiine resolve?
C:>ping www.google.com
Pinging www.google.com [64.233.177.99] with 32 bytes of data:
Reply from 64.233.177.99: bytes=32 time=30ms TTL=43
Reply from 64.233.177.99: bytes=32 time=30ms TTL=43
Reply from 64.233.177.99: bytes=32 time=30ms TTL=43
Reply from 64.233.177.99: bytes=32 time=30ms TTL=43Ping statistics for 64.233.177.99:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 30ms, Maximum = 30ms, Average = 30msSee how it resolve www.google.com to an IP..
Are your 3 lan machines static IPs or are they dhcp from pfsense? Lets see a ipconfig /all from one of them
