Tailscale - can't access device from behind pfsense and local network issue

I am having two issues with tailscale.

First:

I can’t access device I have at work from home computer which is behind pfsense. I know about accepting rules and advertising rules option and I have turn on both.

I can access VM which is behind pfsense at home form my work computer using local VM ip.

I tried using my phone and my mac laptop and they both can connect work computer when it isn’t connected to home network.

I tried removing package and reinstalling completely on pfsense. I tried doing same for work computer. I completely loged out and relogin. Same problem, I can use phone and laptop when not connected to home network but I can’t from behind pfsense home.

Here are screenshots of pfsense:


it is disabled.

Second issue:

Even I mark “Allow local network access” on, I can’t access local network when I ping from work computer. I am trying to reach local network from work compter. I can ping my all other computer which are behind pfsense at home.

I tried running command from terminal in windows and no luck. I tried resetting as suggested by many reddit forums and no luck.

By default Windows firewall blocks IP’s that are not from the same subnet and the screenshot of the Tailscale rule looks like the rule is disabled.

I understand that but how am I able to connect using phone and laptop from outside home network to home as it will have different IP as well.

It is only behind pfsense, I am unable to do it.

What about access to local network on work computer. I have it ticked and still doesn’t work.

If you are on the local network the system will rely on the rules of the firewall, are you blocking access there?

I am not. It does work when I remove tailscale from equation, as soon as I connect to tailscale, it stops working.

Looks like the solution is to have Tailscale advertise a less specific route

https://www.reddit.com/r/Tailscale/comments/14l6rp0/change_subnet_routing_priority/