Blocked packets on WAN interface



  • Hello,

    We have several pfSense firewalls (virtual and appliance) but for one system I am having trouble with blocked traffic through the firewall.

    Internet –> WAN Interface --> LAN Interface -- switch on LAN --- Computers

    We have a service on port 10000 that we need to access.

    We get the following Firewall log entry
    @5(1000000103) block drop in log inet all label "Default deny rule IPv4" for the traffic

    The log entry is
    X May 2 10:50:59 WAN 203.48.200.1:16041 14.201.1.2:10000 TCP:S

    14.200.1.2 = IP Address on WAN interface (PPPoE)

    1. Port Forwarding rule:

    WAN TCP * * WAN address 10000 192.168.1.200 10000 Monitoring system

    2. WAN Rule, automatically generated after Port Forward set up.
    This is after the auto-generated Deny rules for RFC 1918 Networks and Reserved Addresses

    Pass IPv4 TCP * * 192.168.1.200 10000 * none   Monitoring system

    3. NAT - Outbound

    Auto created rule
    WAN 127.0.0.0/8 192.168.1.0/24 * * * WAN address * Auto created rule

    no other rules

    I really cannot see what the problem is as we have similar rules on other firewalls fo other services (HTTP/HTTPS/SMTP)

    Any help appreciated

    rockpaper



  • A reboot of pfSense resolved this.

    Of course, why should we have to reboot pfSense to get this to work?


  • Rebel Alliance Global Moderator

    You wouldn't have to reboot, but you would have to reload the rules.. If your rules did not load, then sure a reboot would load them.

    Was there any error in the loads that your rules didn't load correctly?