Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Easy Rule not working for me for simple case.

    Scheduled Pinned Locked Moved Firewalling
    3 Posts 2 Posters 253 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      LakeWorthB
      last edited by

      So setup is simple, trying to connect to ssh port from one subnet to another. What is interesting is I can connect to the ssh server, but after 30 seconds it freezes, and I see items in the firewall log, that packets were block due to default deny rule. So my first try was I simply clicked the plus sign, and it created a Easy Rule to allow. What is wrong here?

      Get the block.
      deny1.PNG
      Add the rule using Easy Rule
      rule.PNG
      Still get the block.
      deny2.PNG

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        Those are not syn, those are Acks... So out of state..

        You have some sort of asymmetrical routing issue.. Or your clearing your states?

        https://docs.netgate.com/pfsense/en/latest/firewall/troubleshooting-blocked-log-entries-for-legitimate-connection-packets.html

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        L 1 Reply Last reply Reply Quote 1
        • L
          LakeWorthB @johnpoz
          last edited by

          @johnpoz Thanks again, that pointed me in the right direction, and I fixed it. It was a asymmetrical routing issue.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.