Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Strange Firewall problem

    Scheduled Pinned Locked Moved Firewalling
    4 Posts 3 Posters 825 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      exa_gon
      last edited by

      I've some problem with Outlook connection (MAPI ) in Wireless with Firewall.

      When I enable the firewall and the rule on the interface is :

      Open any <-> any - any protocol

      I've a lot of disconnection from Outlook to Exchange Server and on the firewall I have that log :

      10.170.10.40 ( Exchange Server )
      10.170.100.19 ( Client Outlook via WIFI )

      Jul 6 09:48:38 	LAN_WIFI 	10.170.100.19:50661		10.170.10.40:25818		TCP:R
      Jul 6 09:48:38 	LAN_WIFI 	10.170.100.19:50630		10.170.10.40:25818		TCP:R
      Jul 6 09:48:40 	LAN_WIFI 	10.170.100.19:50616		10.170.10.40:25818		TCP:R
      Jul 6 09:48:41 	LAN_WIFI 	10.170.100.19:50661		10.170.10.40:25818		TCP:R 
      

      But when I disable the firewall vi "advanced"-> "disable firewall" all work like a charm.

      Someone can point me ?
      Thanks in advance.
      Regards

      1 Reply Last reply Reply Quote 0
      • M
        mer
        last edited by

        10.40 and 100.19, are they sitting on 2 different ports (lan, opt) of your pfSense device?  Do you have rules on both of those interfaces that will allow traffic between them?

        At some point, someone will probably ask you to post screenshots of the firewall rules for all the interfaces and any floating rules.  It makes it easier to help you.

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          That block is out of STATE its a Reset Packet..  Notice the R

          So 10.170.100.19 told 10.170.10.40 to F off ;)

          But pfsense blocked it because it was not in state.  I would guess you have an asymmetrical routing problem.

          Please post your connection setup and your rules from your different interfaces.. What masks are you using on these networks..

          What is your wifi setup is there more than 1 AP, is pfsense the AP?

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

          1 Reply Last reply Reply Quote 0
          • E
            exa_gon
            last edited by

            I've solved.

            The problem is a routing problem.So on going way the route is in the pfsense and on the return the route is without the pfsense.
            Now I've resolved the routing problema and the reset packet go away, the outlook work well.

            Thanks to all.

            johnpoz good perception! ;)

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.