Netgate SG-1000 microFirewall

Author Topic: [SOLVED] giving WAN access to a single host  (Read 185 times)

0 Members and 1 Guest are viewing this topic.

Offline charvey

  • Newbie
  • *
  • Posts: 17
  • Karma: +0/-0
    • View Profile
[SOLVED] giving WAN access to a single host
« on: December 21, 2017, 11:50:07 pm »
I thought this would be a simple task. I have a single device on a subnet and I only want that single device to be able to access the WAN.

I have attached my firewall table for that subnet. Notice the WAN pass rule passes nothing and the default block rule blocks numerous packets. All the blocked packets are for WAN ip addresses from 192.168.6.2.

Why wouldn't typical internet traffic match the 3rd row?

Thanks!
« Last Edit: December 22, 2017, 06:22:23 pm by charvey »

Offline viragomann

  • Hero Member
  • *****
  • Posts: 2823
  • Karma: +310/-1
    • View Profile
Re: giving WAN access to a single host
« Reply #1 on: December 22, 2017, 02:52:31 am »
WAN net is only the subnet your WAN address belongs to, resulting from the WAN address and the associated mask.

If you want to open up Internet access the destination has to be any. When other subnets should not be allowed put them in an alias and set the alias at destination combined with the "invert" check.

Offline AMizil

  • Jr. Member
  • **
  • Posts: 29
  • Karma: +3/-0
    • View Profile
Re: giving WAN access to a single host
« Reply #2 on: December 22, 2017, 03:12:36 am »
Hello

The rule should be changed.

WAN NET = WAN "NETWORK" ( entire subnet)
WAN ADDRESS  = WAN  "IP"  Address

Try to change destination of your rule (3rd row)  follows :   change destination   from WAN NET to   Any (*)  , as this is a basic FW rule to allow access to Internet.

Add another rule bellow this one on LAN interface :

Action Block
Interface LAN

Source *
Protocol *
Port *
Destination *

Adrian