Blocking traffic at random

[kfolman]

Hi guys.

I 've stumble across a really weird problem.
Our firewall sometimes blocks and sometime accepts packets to a openvpn host.

So, I've even created an any rule, as the first rule, on both interfaces, so nothing should be blocked right?

But still, these two appears in my logging (see attached)

The passed package, is the rule, that are supposed to pass that specific package, so that's all good.
But the blocked rule, is the last rule on the lan interface, set to reject all traffic. But how is it passing a package, and then a short time after blocking an almost identical package?

I hope someone out there can shed some light on this issue.

Thanks!
Kasper

[johnpoz]

much easier to read if you just posted a screenshot of pfsense firewall log.  I don't see where state is listed there.  But one of your rules is pass and the other is block.

Your timestamp is the same on these entries..