OPNsense Forum

English Forums => General Discussion => Topic started by: opnsense1 on October 03, 2025, 07:06:42 PM

Title: Blocking a range of devices with Wireguard VPN not working
Post by: opnsense1 on October 03, 2025, 07:06:42 PM
Hello, I scoured every resource I could find and they all seem to say the same thing but my firewall rule is not working. I want to block internet access for devices 192.168.86.200-192.168.86.255.

I setup an alias for that IP range. I setup a block rule on the LAN interface with a direction of in and source being my alias. Screenshots of everything are attached.

I made sure that the rule is the top on the list so that another doesn't match first. I also tried setting the block rule to `Single host or Network` and `192.168.86.200/32` as the host in case some how my alias just wasn't catching the device.

In my DHCP leases, the device has a a status of online there and displays the IP address of `192.168.86.200` so the static IP is correctly being set.

I made sure to apply my changes.

Any ideas? Is the fact that I have a wireguard VPN setup interfering with the rules? I thought that the rules would still apply but cannot figure out why the rule is doing nothing.