Sounds like a NAT issue. Manually configure our outbound NAT or tell it not to NAT. Also you should be able to SSH to the box and look over your logs for denied access if it is a rule issue.
Curtis LaMasters http://www.curtis-lamasters.com http://www.builtnetworks.com 2009/1/8 Peter Todorov <pmi...@gmail.com> > I have got ping from LAN to DMZ ...... I do not have ping from DMZ to LAN > Is there some restriction that I have mised? > > On Thu, Jan 8, 2009 at 12:28 PM, Aarno Aukia <m...@arska.ch> wrote: > >> If you would like to send ping-replies from LAN to DMZ you might have to >> add a "* * * 192.168.4.x * *" to LAN... >> >> -Aarno >> >> 2009/1/8 Peter Todorov <pmi...@gmail.com> >> >> I add * * * 192.168.2.x * * to DMZ and LAN interfaces. I set thease rules >>> to the top .... but there is not even a ping from DMZ to 192.168.2.x. I get >>> ping to LAN interface (192.168.2.1) from DMZ but not to any of computers >>> attached to that interface. >>> >>> On Wed, Jan 7, 2009 at 6:19 PM, Gary Buckmaster < >>> g...@centipedenetworks.com> wrote: >>> >>>> Peter Todorov wrote: >>>> >>>>> Hello, >>>>> I have a LAN that have 192.168.2.0/24 <http://192.168.2.0/24> and DMZ >>>>> (second LAN) with 192.168.4.0/24 <http://192.168.4.0/24> >>>>> How can I access LAN from DMZ? >>>>> pfsense 1.2 - dual WAN configuration. >>>>> Thank you in advance for answers. >>>>> >>>>> -- >>>>> честността не е порок >>>>> >>>>> >>>> Typically this is inadvisable from a security standpoint. However, in >>>> order to allow it, create firewall rules on your DMZ interface with the >>>> destination IP of the machine(s) you want to send to. >>>> !DSPAM:4964d6b815801234511312! >>>> >>>> >>>> >>>> --------------------------------------------------------------------- >>>> To unsubscribe, e-mail: support-unsubscr...@pfsense.com >>>> For additional commands, e-mail: support-h...@pfsense.com >>>> >>>> Commercial support available - https://portal.pfsense.org >>>> >>>> >>> >>> >>> -- >>> честността не е порок >>> >> >> >> >> -- >> Aarno Aukia >> 0764000464 >> > > > > -- > честността не е порок >
