OPNsense Forum

Archive => 23.1 Legacy Series => Topic started by: deerefarmer on June 20, 2023, 08:20:28 PM

Title: Fresh Install - Random Website Access
Post by: deerefarmer on June 20, 2023, 08:20:28 PM
Newbie to Firewalls. Just did a fresh install and have internet access like with Google, bing, youtube, etc but other sites can't connect. Example speedtest.net  I can ping it ok from pc on lan and firewall, but no browser success.
I was seeing default deny on incoming to wan address, created a rule to allow all in to wan, but didn't change browser behavior.

Reading sounds like default install should allow full internet ok. If additional rules are needed, I haven't caught that yet.

So looking for some guidance to read or tools to use, to diagnose the problem.

setup is comcast cable modem on bridge, lan default at 192, pc plugged direct into lan port. Tried unchecking private and bogan,.. no effect.

Thanks for any direction.




Title: Re: Fresh Install - Random Website Access
Post by: cookiemonster on June 20, 2023, 10:22:47 PM
Default allows all out so no additional rule is needed on WAN, in fact an deny on incoming to WAN is normal and wise to leave. That's what protects you LAN.
You probably meant allow in on LAN but that rule is created also by default.
Maybe you're yet to set name resolution for your LAN, or are the dhcp clients using OPN as resolver?
If your browser on the client says something along the lines of " we can't find find the site" or similar? For tools from a command line you can use dig, nslookup, etc.
Title: Re: Fresh Install - Random Website Access
Post by: deerefarmer on June 21, 2023, 05:17:49 PM
My idiocy, I had set my pc initially to a static IP to be beyond the ...1.1 without a gateway
Changing it to obtain... solved it.
Thanks CM for response 
Title: Re: Fresh Install - Random Website Access
Post by: cookiemonster on June 21, 2023, 06:02:56 PM
Glad you spotted the issue :)