I have pfSense (1.2.3) with a WAN (gateway and an OPT1 (gateway I also have a LAN (static, DHCP

I want to create rules so that traffic coming from LAN go through WAN if the source IP address is below and through OPT1 otherwise.

I would I go and make that happen?


Solution: I'm filtering on two subnets as proposed by cpbills and I've added rules on the LAN interface that filters all source and then uses the gateway of OPT1 and for the rest, then it falls back on the default route that forward all traffic to the WAN gateway.


you could break into two subnets, and and then it would be pretty easy to differentiate in your firewall rules.

but that would probably only add to your workload, unless your hosts are assigned IPs via DHCP.

  • Thank you for the answer. And if I'm able to break it into two subnets? How would the rules look like?
    – lpfavreau
    May 18 '10 at 18:20
  • you could try: route add -net netmask gateway where is the IP of your gateway to the WAN. route add -net netmask gateway where is the IP to your OPT1 NIC
    – cpbills
    May 18 '10 at 18:42

I don't believe that would be a rule but instead would be a NAT route. You could set a NAT route for anything from the network to go out the WAN NIC and anything from the network will go out the OPT1 NIC. Check the Firewall/NAT tab.

  • Is there a benefit of using a NAT route versus a rule? Performance-wise or else?
    – lpfavreau
    May 18 '10 at 19:49
  • I don't know of a benefit but it sounded more like you were wanting to route packets instead of setup access rules so that is why I suggested the NAT option. May 19 '10 at 4:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.