Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Clarification re: 'Packet can't go in then out the same interface'

    General pfSense Questions
    2
    2
    298
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hcoin last edited by

      There are several places in the pfsense online docs and forum notes, and also in the freebsd docs, we read the phrase that goes something like this:  "A packet can't go out the same interface it came on'  or 'Packets can't be routed out the same interface they came in on' or 'Packets can't go in then come out of the same interface'.

      When first I read this I thought 'interface' to mean 'the thing inside the box the cable carrying the packets of interest plugs into'.  You know, 'interface' as in 'net card you stick in a slot'.

      Then as I got better at all this I took 'interface' to mean:  'the thing inside the box the cable carrying the packets of interest plugs into, so long as the packets on the cable are on the same VLAN or are untagged (have no VLAN assignment)'.

      Now I think 'interface' means  'the thing inside the box the cable carrying the packets of interest plugs into, so long as the packets on the cable are on the same VLAN or are untagged (have no VLAN assignment) and if ipv4 are on the same subnet, or if ipv6 have the same prefix'.

      Which of the above is the most correct?  Are there further refinements?

      1 Reply Last reply Reply Quote 0
      • Derelict
        Derelict LAYER 8 Netgate last edited by

        Different subnets don't matter.  If you have different subnets defined on a single interface then expect traffic from a host on one subnet to reach a host on the other subnet, you're going to be dealing with "out the same interface it came in on."

        Interfaces are what's listed in Interfaces in the pull-down menu.  They can be physical, virtual (VLAN), PPPoE, Wi-Fi, etc.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post

        Products

        • Platform Overview
        • TNSR
        • pfSense Plus
        • Appliances

        Services

        • Training
        • Professional Services

        Support

        • Subscription Plans
        • Contact Support
        • Product Lifecycle
        • Documentation

        News

        • Media Coverage
        • Press
        • Events

        Resources

        • Blog
        • FAQ
        • Find a Partner
        • Resource Library
        • Security Information

        Company

        • About Us
        • Careers
        • Partners
        • Contact Us
        • Legal
        Our Mission

        We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

        Subscribe to our Newsletter

        Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

        © 2021 Rubicon Communications, LLC | Privacy Policy