seems like hackers (1632679680)

rc222

This post is deleted!

Gertjan

"seems like hackers" is the observation text that goes with firewall rule 1632679680.
"seems" without capital S, for me it's a user GUI firewall rule. If not, as it is surely not a default pfSense firewall rule, it comes from a package. You said yo have snort ? => bingo !

To see this rule, have a look at the file /tmp/rules.debug

Maybe it's time you have a chat with the device on your LAN that starts triggers this firewall rule ?

Btw : strange. LAN should be your trusted network = the network with devices that are ok.

stephenw10

Indeed. Check the rules on LAN for a rule named that.
Also check the floating rules tab for anything that might apply to LAN.

Steve