On 3/18/07, Vaughn L. Reid III <[EMAIL PROTECTED]> wrote:
I have a pfsense firewall in a test network like the one below.

                                                       Internet
                                      provider 1 |          | provider 2
                                                 Pfsense Firewall -- LAN
IP 192.168.10.1/24
                                                             |
                                                     Subnet 1 --
192.168.10.x/24
                                                             |
                                                   Internal Router  --
Subnet 1 IP 192.168.10.14 -- Subnet 2 IP 192.168.12.1
                                                             |
                                                     Subnet 2
192.168.12.x/24


I am having trouble getting the clients on Subnet 2 to get access to
either the Internet or to the interface of the pfsense box.  I have the
following rules entered into the firewall and NAT:
Firewall:
LAN
Allow * from 192.168.0.0/16 to *

NAT:
Do Outbound NAT on 192.168.0.0/16

Here are the symptoms of the problem that I'm having.
When I try to ping or connect to the pfsense box from subnet 1, I can
ping and connect to it without any problems.  When I try to ping or
connect to it from subnet 2, the connection is refused.  In addition, I
can connect to Internet resources normally from subnet 1, but not from
subnet 2.

I thought that maybe the internal router was the problem, so I replaced
the pfsense box with an el-cheapo router and everything worked correctly
from both subnets without any changes to the internal router. I have
also tried specifying allow rules for each subnet in the pfsense
firewall rules page, but that seemed to have no effect.  I am using the
March 18th, 2007 daily build of the pfsense stable.

I also noticed that the firewall log on the pfsense box is logging that
it is dropping everything that is coming to it from subnet 2.

If anyone can help me come up with a solution, I'd appreciate it.

Thanks,

Vaughn



Firewall Rules > add a rule for the subnet2 interface that allows the traffic.

post the config for the interface and also the firewall rules for  subnet2

sai

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to