Project

General

Profile

Actions

Bug #6642

closed

Cant access certain IP's

Added by Jesper Nissen over 8 years ago. Updated almost 8 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
07/26/2016
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
Affected Architecture:

Description

I use pfSense with multiple LAN NICs:
10GWAN holds our 10G public /22 ip scope
1GWAN holds our 1G public /26 ip scope
1GLAN4 holds our office computers on 10.0.0.0/8
DEKONET holds our second companys network on 192.168.0.0/20
LAN holds our servers network on 172.16.0.0/12

I have a interface group named "PortForward" which holds 1GWAN, 10GWAN and LAN.
I have some VPN users on 172.16.31.0/18 and they should not be able to access anything else than a random user on the internet should be able to do.

Everything works exactly as i want it to, except when i try to access 172.16.10.1 from any ip on the DEKONET (192.168.0.0/20) i can't access the ip.
When i access 172.16.10.2 and all other ip's from DEKONET (192.168.0.0/20) everything works.
From the Office network (10.0.0.0/8) i can access both ips.

Screenshot of the rules on "PortForward" interface group: http://cloud.wnb.dk/3u1M0T2f2Y44
Screenshot of the rules on "DEKONET": http://cloud.wnb.dk/1L2f070u3425
Screenshot of the rules on "1GLAN4": http://cloud.wnb.dk/1j3A0i2b2g1z

I wrote on the forum as well: https://forum.pfsense.org/index.php?topic=114368.msg635762#msg635762

Actions

Also available in: Atom PDF