WAN_DHCP Gateway Falsely Showing Down b/c of Firewall Rule Blocking Ping
-
Problem: The automatically generated "WAN_DHCP" gateway incorrectly shows down because the ping to the gateway is getting blocked by a firewall rule.
The firewall log shows the ping being blocked by @25(1000001570)
@25(1000001570) looks like this:
@25(1000001570) block drop in log on ! re1 inet from 99.73.20.0/22 to any [ Evaluations: 302973 Packets: 0 Bytes: 0 States: 0 ] [ Inserted: pid 89572 State Creations: 0 ]
however, this rule is not found anywhere in /tmp/rules.debug so I can't figure out why it is getting generated! Rebooting does not fix it either. Any ideas?
Thanks!
-
Just checked /tmp/rules.debug again today and realized the rule is in fact in there:
antispoof log for $WAN tracker 1000001570
The WAN interface is getting a DHCP assigned address and gateway from the internet provider...so why is the rule above blocking a ping attempt to the gateway address assigned by the internet provider?
Thanks!
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.