Problem: i do get WAN IP and status “online”. i can ping outside but i can´t “surf” the web. input on what to test would be appreciated
Setup:
Basic setup with the Wizard.
Netgate 2100 with 23.01 release
WAN = DHCP (Public ip)
Lan = 192.168.1.1/24
DNS = tested with static ones like google and tested with the one the ISP provide.
Rules = standard rules “LAN to any allow” etc
NAT = automatic rules in place, mode is automatic.
Have tested with and without “block private networks” options.
Have tested with different DNS options, with or without DNS overice from ISP
If i set a static WAN IP it works fine. did just try to change to DHCP and it does not work, tested different connections with a live ISP and in a LAB.
the ISP gives DHCP with public IP.
But right now i did test in a LAB with a local ip via DHCP, same result. (the Block private network and block bogon networks, options is turned of.
i do get the IP from the other firewall, 192.168.4.1 in this case.
i get the status as “Online”
i can Ping outside but i can´t surf.
yes, right now when i am dubble nated i have those option turned off, also i did test to turn them off when i had a public ip just because, no luck there.
my DNS servers are 8.8.8.8 and 1.1.1.1
i have tested with both “DNS Server override” on and off. no difference.
i can´t do a DNS lookup, it “can not be resolved”
i can ping like 1.1.1.1 from my laptop and from the firewall.
this is so wierd.
i did have IPv6 on, did set it to “None” and saved, then everything worked.
i did a reboot just to be sure it keeps working and after reboot it does not work any more.
(DNS Forwarder was of and resolver on)
i will try download the patches.
Firewall rules:
on WAN there is no rules at all.
on LAN there is the tre standard rules, anti lockout, LAN to ANY allow, and LAN to ANY IPv6 Allow. in that order. have not changed them from the wizard default.
have tested to install all patches, have factory restored the system and tested everything one more time, no luck. still same problem. this starts to be annoying.
You have to adjust your default gateway to the IP you received via DHCP. It is “automatic” by default but it doesn’t always work for reason I can’t explain. Go in System | Routing and select the correct default gateway. Things should start to work afterward.
i had already tested that,
i did change internet conenction now, and now i get status “offline” on the gateway and 100% loss. but right now it works. and it take about 5-10 minutes from startup before it working so this does not feels like something i want to deploy at a customer.
i am not trying to do dubble nat, it is just for testing because i did not get DHCP with public IP to work.
i can get it to work now, but it takes about 10 minutes from firewall startup untill it works. so still i would not like to put that firewall out to a customer.
and jsut to answer, yes i have tested both supplied DNS and 3rd party DNS.
Agree weird. How is the PFSense Wan connected to the ISP?
I’m my case my ProtectLi/PFSense/Opensense box was connected to an ARIS cable modem. When I moved the cable modem from Unifi USG to ProtectLi nothing worked until I rebooted the Aris modem. Reason – ISP, Aris and the “Netgate” wan all need to get in sync. Now in some cases, you may need to spoof the Mac Address of the working computer onto Netgate. ISPs all seem to use different solutions that identify the actual customer connecting to their network:-) in some cases Netgate may need a user/password.
When it is both working and not do you have a way to get the Wan IP address? Are they both logical ie IP address traceable to the ISP and not something g like 169.*.
Hope you somehow get this working wit a bit of magic.
