On Sat, Apr 24, 2010 at 5:11 PM, David Miller <[email protected]> wrote: > Using 2.0beta from 4-18 > > WAN network is 10.0.1.0/24, pfsense interface is 10.0.1.50 > LAN network is 172.30.0.0/24, pfsense interface is 172.30.0.1 > > I have one client on the LAN side at 172.30.0.17. I'm testing a trivial > setup with a pfsense firewall between the client and my internal lan. > > I setup a 1:1 NAT between 10.0.1.17 and 172.30.0.17. > I setup a firewall rule to allow traffic of type any from * to 10.0.1.17 on > the WAN interface. Also, to be sure, added one to 172.30.0.17. Save, > applied changes. >
The 172.30.0.17 one is all you need, NAT first, then rules. You're probably missing a virtual IP for that 10. IP. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] Commercial support available - https://portal.pfsense.org
