Hello
I have this rules for LAN (192.168.0.0) and Livebox is 192.168.1.1
deny in IPv4 TCP ! * 80 (HTTP) Livebox 80 (HTTP) * *
allow in IPv4 * * * * * * * Default allow LAN to any rule
allow in IPv6 * * * * * * * Default allow LAN IPv6 to any rule
BUT
I still can acces Livebox from any machine on LAN.
What am I not understanding ?
Thanks for help
You simply can't control LAN traffic, it goes directly from client to client and never reaches the OPNsense....
You'll need to seperate your network in different Subnets to make the traffic pass OPNsense
Quote from: chemlud on April 13, 2021, 10:17:10 AM
You simply can't control LAN traffic, it goes directly from client to client and never reaches the OPNsense....
Quote from: lfirewall1243 on April 13, 2021, 11:12:14 AM
You'll need to seperate your network in different Subnets to make the traffic pass OPNsense
both definitely true, but maybe not applicable to stanthewizzard's problem.
His "Livebox" (whatever this is) seems to live in a different network segment 192.168.1.0/24.
I think, the firewall rule is wrong in two aspects
- the negation of source "any"
- the specification of source port "80"
and should read
deny in IPv4 TCP * * Livebox 80 (HTTP) * *
I understand the same subnet issue.
But livebox is outside of it (so should go through the fw)
I'll try asap the last rule suggested.
Thanks for your answers and time