Lan to Lan traffic not passing without adding additional rule for it
-
We have a rule that allows all lan traffic to pass everywhere.
But for some reason it would not allow certain type of traffic.Any idea why the last rule in the image is needed?
-
It's not needed. It does nothing.
-
-
Look at the firewall logs and see what rule is blocking it. You can also put the rule back and enable logging.
Something is not how you think it is because what you're describing is pretty much not possible.
I see HA_SYNC. Are you sure both units have the pass any any rule? Are you sure you're making changes on the correct unit?
-
Yeah you have a any any rule, that more specific rule below it would never even trigger.. So as mentioned, lets see your firewall rule when you take that out, and then lets see the traffic pass thru that rule by logging it, etc.