Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Blocked packets where pass rule exists

    Scheduled Pinned Locked Moved General pfSense Questions
    3 Posts 3 Posters 656 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • U
      unsichtbarre
      last edited by

      I have a pass rule for: 172.16.50.0/24 to 172.31.0.0/16 but I still see tons of packets blocked in the firewall log:

      block/1000000103
      Aug 11 09:42:42 IPsec 172.16.50.70:48531 172.31.12.102:4008 TCP:A
      block/1000000103
      Aug 11 09:42:42 IPsec 172.16.50.70 172.31.12.102 TCP:
      block/1000000103
      Aug 11 09:42:42 IPsec 172.16.50.70:48531 172.31.12.102:4008 TCP:A
      block/1000000103
      Aug 11 09:42:42 IPsec 172.16.50.70 172.31.12.102 TCP:

      Why is the firewall blocking when I have a pass rule in place?

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        well 2 of those show TCP:A which would be Ack which points to out of state connections.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • KOMK
          KOM
          last edited by

          https://doc.pfsense.org/index.php/Why_do_my_logs_show_%22blocked%22_for_traffic_from_a_legitimate_connection

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.