OPNsense Forum

Archive => 17.1 Legacy Series => Topic started by: pbolduc on February 21, 2017, 08:29:59 pm

Title: [SOLVED] Firewall Block Policy
Post by: pbolduc on February 21, 2017, 08:29:59 pm

I am trying to create an outbound Firewall Block policy from the LAN interface to the WAN. I would like to prevent attempts from the LAN to access public SMB servers. My firewall policy is as follows:

Proto: IPv4 * Source: 192.168.1.0/24 Port: * Destination: WAN Address Port: File & Printer Sharing Port Group Gateway: *

This policy doesn't work even when i change the destination: WAN Address to Wan Net. However, if I make the Destination: "Any" it works but then it blocks access to my remote IPSec Networks as well. Any help would be much appreciated. I still want the LAN users to be able to access File Sharing services on different IPSec subnets.

Regards,

Title: Re: Firewall Block Policy
Post by: kyferez on February 21, 2017, 08:50:37 pm

Add a rule above the one you created to allow access to the IPsec subnets for SMB.

Title: Re: Firewall Block Policy
Post by: pbolduc on February 21, 2017, 08:52:35 pm

 Thanks so much, this worked! For some reason I was hitting a wall! =)