Why would the default deny rule block this connection?
cyberspirit last edited by
I having trouble with the default deny rule (ipv4) for just one machine.
Why would this one be blocked?
Please see attachment
![Screen Shot 2017-08-18 at 9.39.13 AM.png](/public/imported_attachments/1/Screen Shot 2017-08-18 at 9.39.13 AM.png)
![Screen Shot 2017-08-18 at 9.39.13 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2017-08-18 at 9.39.13 AM.png_thumb)
Because its out of state - notice the A.. that is ACK.. if pfsense never saw the SYN then no state would be open.
kpa last edited by
Do yourself a favor and turn off logging for the default deny rule, the option is at Status/System Logs/Settings/Log firewall default blocks. The reason you don't want to keep this option enabled is that it logs awfully lot of useless stuff from improperly torn down connections and other internet noise. Write your own specific rules to log traffic you want to log instead.