OPNsense Forum

English Forums => General Discussion => Topic started by: rubber_chicken on June 19, 2022, 07:15:59 AM

Title: Blocking Internet Access to IP Range
Post by: rubber_chicken on June 19, 2022, 07:15:59 AM
I'm new to opnsense and I've been trying to block internet access to IP range 192.168.1.4-99 in my network, unsuccessfully. My setup is as below:

I first created an alias of the IP range:
https://ibb.co/G3QbCrN


Then added the firewall rules (#3 in the list) for local network:
https://ibb.co/km9RwSt

Can someone help me with how I can correct this to get it working? I can confirm that even without alias, if I enter single host in the firewall rule like 192.168.1.39/24, internet is still being accessed by the device.

Thanks.
Title: Re: Blocking Internet Access to IP Range
Post by: Demusman on June 19, 2022, 01:26:01 PM
Delete the second rule from the top.
Rules are order based from top down.
Title: Re: Blocking Internet Access to IP Range
Post by: rubber_chicken on June 20, 2022, 06:31:01 AM
Works, thanks!