Can you ping by IP? If pfSense is blocking this you'll see it in the raw logs. SSH to the firewall and select option 10.
Curtis LaMasters http://www.curtis-lamasters.com http://www.builtnetworks.com On Thu, Oct 9, 2008 at 3:04 AM, Peter Todorov <[EMAIL PROTECTED]> wrote: > 192.168.0.1 LAN > -------------- ------------------------------merlin > | pfsense| > -------------- -------------------------------taira > 192.168.3.5 DMZ > > > > > > > On Thu, Oct 9, 2008 at 10:49 AM, Tonix (Antonio Nati) < > [EMAIL PROTECTED]> wrote: > >> This is a dns resolution error. >> Where is "merlin" resolved? >> >> Tonino >> >> Peter Todorov ha scritto: >> >> I stil cannot ping the LAN I get: >> >> su-2.05b# ping merlin >> ping: cannot resolve merlin: Unknown host >> >> On Thu, Oct 9, 2008 at 4:31 AM, Chris Buechler <[EMAIL PROTECTED]>wrote: >> >>> 2008/10/8 Paul Mansfield <[EMAIL PROTECTED]>: >>> > >>> > icmp echo request on DMZ interface, >>> >>> yes (in a firewall rule) >>> >>> > as well as a route to LAN on DMZ >>> >>> which should be handled by the systems' default routes, assuming >>> that's pfSense. >>> >>> >>> > machines, and advanced NAT so that LAN isn't natted to DMZ >>> > >>> >>> No, only traffic leaving WAN interfaces gets NATed, not between >>> internal interfaces. >>> >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail: [EMAIL PROTECTED] >>> For additional commands, e-mail: [EMAIL PROTECTED] >>> >>> >> >> >> -- >> честността не е порок >> >> >> >> -- >> ------------------------------------------------------------ >> [EMAIL PROTECTED] Interazioni di Antonio Nati >> http://www.interazioni.it [EMAIL PROTECTED] >> ------------------------------------------------------------ >> >> > > > -- > честността не е порок >
