1
Tutorials and FAQs / Re: Peculiar Firewall issue. Unable to access WAN unless firewall is disabled.
« on: August 03, 2024, 11:42:05 am »
Attaching network diagram.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
2
Tutorials and FAQs / Peculiar Firewall issue. Unable to access WAN unless firewall is disabled.
« on: August 03, 2024, 11:41:31 am »
Hi All,
I recently moved in to a new house. This involved moving over my existing infrastructure which was working without any issue, while also doing some changes. For context, my previous home had a VDSL line and I was using the ISPs modem router. The area where I moved in does not have VDSL or Fiber so I was forced to use a 5G modem which I've hooked up to a router (MikroTik hAP ac³). Before moving, I've kept notes, of the previous configuration so that I could translate it over to the new router.
Now here is where things got weird. I've transferred over the configuration, connected my Proxmox host (192.168.1.200/16) to the new router (192.168.1.1) and booted up OPNsense (192.168.1.120/16 WAN - 10.10.1.1/24 - LAN) which is was previously was previously working properly and realized that hosts connected to the LAN interface had no connectivity outside of 10.10.1.1/24. OPNsense itself could ping both ways, but my desktop (10.10.1.13) could only ping OPNsense (10.10.1.1). Checked over my rules and the associated logs and saw that my pings were allowed. Then I ran "pfctl -d" and suddenly I was able to ping outside my LAN. This pointed me to believe that the issue was specific with the firewall itself and not routing. For better clarify I have attached a basic diagram of my current network, along with both my NAT, LAN and WAN rules.
Current OPNsense version is 22.7.6.
Any clue as to how I might be able to resolve that? Would really appreciate any feedback.
I recently moved in to a new house. This involved moving over my existing infrastructure which was working without any issue, while also doing some changes. For context, my previous home had a VDSL line and I was using the ISPs modem router. The area where I moved in does not have VDSL or Fiber so I was forced to use a 5G modem which I've hooked up to a router (MikroTik hAP ac³). Before moving, I've kept notes, of the previous configuration so that I could translate it over to the new router.
Now here is where things got weird. I've transferred over the configuration, connected my Proxmox host (192.168.1.200/16) to the new router (192.168.1.1) and booted up OPNsense (192.168.1.120/16 WAN - 10.10.1.1/24 - LAN) which is was previously was previously working properly and realized that hosts connected to the LAN interface had no connectivity outside of 10.10.1.1/24. OPNsense itself could ping both ways, but my desktop (10.10.1.13) could only ping OPNsense (10.10.1.1). Checked over my rules and the associated logs and saw that my pings were allowed. Then I ran "pfctl -d" and suddenly I was able to ping outside my LAN. This pointed me to believe that the issue was specific with the firewall itself and not routing. For better clarify I have attached a basic diagram of my current network, along with both my NAT, LAN and WAN rules.
Current OPNsense version is 22.7.6.
Any clue as to how I might be able to resolve that? Would really appreciate any feedback.
Pages: [1]