<![CDATA[Always getting big red X on connections that are in passlist]]>I am not sure what is going on with this.  As you can see in the 2nd pic, there is what seems to be a block of the two addresses.  In the 1st pic, you can see that both those addresses are in a passlist.  Why is the red X along side the ips that are in the passlist?  (Snort also is pointing to the passlist.)

pic2.png
pic2.png_thumb
pic1.png
pic1.png_thumb

]]>https://forum.netgate.com/topic/105282/always-getting-big-red-x-on-connections-that-are-in-passlistRSS for NodeFri, 17 Apr 2026 19:02:40 GMTMon, 12 Sep 2016 11:40:33 GMT60<![CDATA[Reply to Always getting big red X on connections that are in passlist on Tue, 13 Sep 2016 16:17:49 GMT]]>If pfsense closes the session seeing a fin from your server to the remote client, then sure the response fin,ack could be blocked and logged.

One way to get rid of such noise would be to just log syn packets.  I turn off default logging and enable a block rule that only blocks syn packets for my log.  So I log attempts to ports that are not open for example say something hits 3389, then sure that is logged.  But other sort of noise like FA packets are not logged.

]]>https://forum.netgate.com/post/649241https://forum.netgate.com/post/649241Tue, 13 Sep 2016 16:17:49 GMT<![CDATA[Reply to Always getting big red X on connections that are in passlist on Mon, 12 Sep 2016 22:54:13 GMT]]>Thanks KOM.  That has to be the answer and it is nicely explained.  As it said, my connections were going through, so I couldn't understand the X block indicator.  The connections are going to 2 of my own servers and they both do send FIN packets.

]]>https://forum.netgate.com/post/649143https://forum.netgate.com/post/649143Mon, 12 Sep 2016 22:54:13 GMT<![CDATA[Reply to Always getting big red X on connections that are in passlist on Mon, 12 Sep 2016 13:49:17 GMT]]>https://doc.pfsense.org/index.php/Why_do_my_logs_show_%22blocked%22_for_traffic_from_a_legitimate_connection

]]>https://forum.netgate.com/post/649014https://forum.netgate.com/post/649014Mon, 12 Sep 2016 13:49:17 GMT<![CDATA[Reply to Always getting big red X on connections that are in passlist on Mon, 12 Sep 2016 11:59:48 GMT]]>Not real knowledgeable about what is needed here.

pic4.png
pic4.png_thumb
pic3.png
pic3.png_thumb

]]>https://forum.netgate.com/post/648982https://forum.netgate.com/post/648982Mon, 12 Sep 2016 11:59:48 GMT<![CDATA[Reply to Always getting big red X on connections that are in passlist on Mon, 12 Sep 2016 11:43:37 GMT]]>So was that a SYN that was blocked or out of state?  Your not showing your full log, nor are you showing your wan rules?  You have a port forward to 49339?  And 9689??

9689 EMC2 (Legato) Networker or Sun Solcitice Backup (Official)

]]>https://forum.netgate.com/post/648978https://forum.netgate.com/post/648978Mon, 12 Sep 2016 11:43:37 GMT