Understanding strange firewall block logs originating from LANs
-
After updating to pfSense 2.4.3, I noticed something in my firewall logs that doesn't make much sense to me. According to the logs the firewall is blocking some packets meant for WA-Networks, but on all my interfaces I have the default pass any > any rules.
Attached are some screenshots, the block logs for IPv6 are because I turned off IPv6 globally.
Also, I don't use pfBlockerNG, so that's not causing this. Other than this I pretty much have a vanilla pfSense install with an OpenVPN server, so these logs are really confusing.
-
-
Some IPv6 & IPv4 multicast comming from the clients regardless of enabling IPv6.
Also out of state traffic.
If you don't want to see the IPv6 stuff create an IPv6 block any any and don't log.
The default block rule logs everything.
