1
23.7 Legacy Series / Re: Unable to ping LAN addresses from firewall
« on: January 04, 2024, 04:19:00 am »
My apologies for being standoff-ish there. Reinstalling and recreating everything from scratch somehow worked.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
2
23.7 Legacy Series / Re: Unable to ping LAN addresses from firewall
« on: December 30, 2023, 02:54:58 am »
Bringing this back to the first page just to hopefully get some help.
3
23.7 Legacy Series / Re: Unable to ping LAN addresses from firewall
« on: December 23, 2023, 08:14:20 pm »
192.168.10.1/24
4
23.7 Legacy Series / Re: Unable to ping LAN addresses from firewall
« on: December 23, 2023, 05:48:48 pm »
They are set to the domain profile for Windows firewall which I have it turned off. The firewall can't even ping things like my printer which I can ping from my servers. I can ping from my laptop to my DCs without issue as well. It is literally just the firewall itself that cannot ping any device on my LAN
5
23.7 Legacy Series / Re: Unable to ping LAN addresses from firewall
« on: December 23, 2023, 04:30:07 pm »
This was a clean install. Your solution makes no sense as there is nothing on my LAN running IDS/IPS, there's no software firewalls on my LAN, nothing. IDS is not enabled in OPNsense, either.
6
23.7 Legacy Series / [SOLVED] Unable to ping LAN addresses from firewall
« on: December 23, 2023, 04:13:29 am »
I'm going a little nuts here trying to get my new OPNsense install to even so much as PING anything on my local LAN. I'm trying to set up an LDAP connection to one of my DCs, but ping fails to both as well as to devices with static IPs on my network (such as my printer or WAPs). Since Ping fails, the LDAP connection fails with just the generic LDAP bind error [; Can't contact LDAP server] in the log file. I'm not seeing anything in the firewall logs that it's even trying to connect from the firewall itself to any of my internal devices I try to ping.
I have two internet connections and just the one LAN connection (with two additional VLANs).
OPT1, IGC0 is my primary WAN connection
WAN, IGC1 is my backup WAN connection (both are DHCP, but only my primary gets a public IP because the router provided by the ISP for my backup doesn't support passing through its IP to the firewall)
LAN, IGC2 is my LAN interface with a static IP of 192.168.10.1/24. All of my internal devices are able to access the internet without issue
The VLANs I'm not concerned about as they only need internet access and they work just fine
I have AD controllers at 192.168.10.15 and .16. I have Group Policy configured to have the Windows Firewall disabled on domain-joined systems including these DCs.
I do have two port forwards, one for Plex and one for an XMPP server (hosted on DC01 at .15) I run for my wife and me. These work just fine as well.
Whenever I attempt to ping anything from the firewall to any device on my LAN, it's 100% packet loss, but I can ping these devices and get replies from my laptop. I'm about to pull my hair out at this.
I don't see anything in the firewall logs to even lead me to believe it's trying to ping or initiate the LDAP connection to either DC on the LAN interface.
I'm happy to provide any screenshots or even my config file (uploaded to a secure source, of course) as needed to help me with this.
I have two internet connections and just the one LAN connection (with two additional VLANs).
OPT1, IGC0 is my primary WAN connection
WAN, IGC1 is my backup WAN connection (both are DHCP, but only my primary gets a public IP because the router provided by the ISP for my backup doesn't support passing through its IP to the firewall)
LAN, IGC2 is my LAN interface with a static IP of 192.168.10.1/24. All of my internal devices are able to access the internet without issue
The VLANs I'm not concerned about as they only need internet access and they work just fine
I have AD controllers at 192.168.10.15 and .16. I have Group Policy configured to have the Windows Firewall disabled on domain-joined systems including these DCs.
I do have two port forwards, one for Plex and one for an XMPP server (hosted on DC01 at .15) I run for my wife and me. These work just fine as well.
Whenever I attempt to ping anything from the firewall to any device on my LAN, it's 100% packet loss, but I can ping these devices and get replies from my laptop. I'm about to pull my hair out at this.
I don't see anything in the firewall logs to even lead me to believe it's trying to ping or initiate the LDAP connection to either DC on the LAN interface.
I'm happy to provide any screenshots or even my config file (uploaded to a secure source, of course) as needed to help me with this.
Pages: [1]