====== PFSense - Troubleshooting - Firewall Blocking an Internal Address ======

===== Check the Firewall Logs =====

Check firewall logs at **Status -> System Logs -> Firewall**

----

===== Try to open a pass-all rule =====

Add a pass-all rule at the top for that VLAN on pfSense and enable logging.

If this allows this through then go through each subsequent rule to see if there is a problem.

----

===== Check ARP tables =====

Navigate to **Diagnostics -> ARP Table**.

On your client, when you try and ping pfSense on 192.168.1.1, you should see your MAC in the ARP table.

Check the MAC address is correct, i.e. matches up with pfSense MAC address.


If the MAC address does not match the pfSense MAC address:

  * There may be an entry for the IP in the ARP, so try to delete it.  
  * The system should automatically add this in again correctly.

----