Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login
    Introducing Netgate Nexus: Multi-Instance Management at Your Fingertips.

    Bug: sticky-address cannot be redefined on odd rules [Solved - workaround]

    Scheduled Pinned Locked Moved Firewalling
    4 Posts 2 Posters 917 Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • 4 Offline
      4o4rh
      last edited by 4o4rh

      I have multiple VLANs and I have two rules that were previously working i.e. VPN bypass for China and ICMP. They were both working on the VLAN (and the same rule definitions are working on other VLANs), but they no longer work on this VLAN.

      I have tried deleting the rules and creating them new, or deleting and copying them from a working one in another VLAN, but each time they go to VLAN26, I get the below error.

      There were error(s) loading the rules: /tmp/rules.debug:477: sticky-address cannot be redefined - The line in question reads [477]: pass in quick on $VLAN_26_INTERN $GWGW_GRP_WAN inet proto { tcp udp } from any to $BYPASS_VPN_CHINA port $BYPASS_VPN_PORTS tracker 1614590170 keep state label "USER_RULE: Pass GREEN out WAN_NET Ports"
      
      4 1 Reply Last reply Reply Quote 0
      • 4 Offline
        4o4rh @4o4rh
        last edited by

        @gwaitsi so someone else already reported this bug
        https://redmine.pfsense.org/issues/10726

        workaround: instead of selecting individual icmp types, select any.

        D 1 Reply Last reply Reply Quote 0
        • D Offline
          dumdedumda @4o4rh
          last edited by

          @gwaitsi said in Bug: sticky-address cannot be redefined on odd rules [Solved - workaround]:

          workaround: instead of selecting individual icmp types, select any.

          Getting the same bug. Could you explain how to go about: "instead of selecting individual icmp types, select any"?

          Thanks.

          4 1 Reply Last reply Reply Quote 0
          • 4 Offline
            4o4rh @dumdedumda
            last edited by

            @dumdedumda when you add a rule with protocol ICMP, under subtypes there is "Any" or various other subtypes.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.