OPNsense Forum

English Forums => General Discussion => Topic started by: bawitdaba on September 09, 2025, 08:06:31 AM

Title: [SOLVED] Block IoT Devices from Internet, but allow on OpenVPN Clients
Post by: bawitdaba on September 09, 2025, 08:06:31 AM
Hello

I'm brand new to OPNSense I've just migrated from pfSense and i'm having a very hard time understanding these firewall rules.

I want to block my IoT devices (firewall alias, single host for testing at the moment) from accessing the Internet (i was able to setup a !inverse block rule on LAN to do this), but I can't seem to figure out how to allow the IoT devices access to/from OpenVPN clients.

I feel like i've tried every rule possible, and i'm clearly missing something. I've done a fair amount of searching and I didn't find any posts with this issue.

Any suggestions?

/edit/

I was able to solve this by adding an alias for RFC 1918 Private Networks with the following networks and updating the inverse destination to that alias.
10.0.0.0/8
172.16.0.0/12
192.168.0.0/16

One of the IoT devices I was testing with was an IP Camera and the app I was using wasn't properly configured and was trying to access the WAN IP which was preventing this from working.

Here is the working rule
(https://cdn.discordapp.com/attachments/831751273040314388/1415253068005638226/image.png?ex=68c288a1&is=68c13721&hm=168b215a9e1347518f945e1361674f9442e29364e996fc569ea415196ccdd8b7&)