Blocked by default deny

Sector8899

I have tons of blocked default deny log entries that I'm trying to understand. These don't really make sense to me, because I have actually rules to cover this case:

► LAN	Default deny rule IPv4 (1000000104)	  192.168.222.1:3964	  192.168.222.10:32400	TCP:RA

My LAN subnet is 192.168.222.0/24 and 192.168.222.1 is my pfSense

I have a
ALLOW: IPv4+6 from 'LAN net' to Any (all ports)
rule, so I don't understand the nature of these log entries.

viragomann

@w5ofwur1xtomtk9zbo said in Blocked by default deny:

TCP:RA

This packet is out of state. This is only logged, when the SYN packet didn't pass pfSense or when the connection is already timed out.

I'm wondering, why this is coming from pfSense IP. Possibly your network settings are wrong.
Did you set a gateway in the LAN interface settings?

Sector8899

@viragomann
No, I did not.

johnpoz

@w5ofwur1xtomtk9zbo that is blocked in the outbound direction. see the little triangle thing before the interface.

But @viragomann is correct that is out of state block RST.

Port 32400, that is the plex port.. Odd that pfsense would be making connections to plex.. Are you doing any port forwarding between your interfaces? A nat reflection setup? Outbound nat setup on lan?

Is that 222.10 box your plex server?

Could you post any port forwards you have setup and your outbound nat tab.