Easy Rule not working for me for simple case.

[LakeWorthB]

So setup is simple, trying to connect to ssh port from one subnet to another. What is interesting is I can connect to the ssh server, but after 30 seconds it freezes, and I see items in the firewall log, that packets were block due to default deny rule. So my first try was I simply clicked the plus sign, and it created a Easy Rule to allow. What is wrong here?

Get the block.

Add the rule using Easy Rule

Still get the block.

[johnpoz]

Those are not syn, those are Acks... So out of state..

You have some sort of asymmetrical routing issue.. Or your clearing your states?

https://docs.netgate.com/pfsense/en/latest/firewall/troubleshooting-blocked-log-entries-for-legitimate-connection-packets.html

[LakeWorthB]

@johnpoz Thanks again, that pointed me in the right direction, and I fixed it. It was a asymmetrical routing issue.