<![CDATA[pfsense ce 2.7.2 configured with port forwarding, packet drops randomly (pfsenseplus looks like work)]]>I configured port forwarding rules for our application, to allow the client access this application, we need allow 3 tcp and 4 udp ports
b69f5f5e-a936-4f5a-8bc8-3b54e93eebde-image.png
then we lauched the connections, but most time it will be failed to connect only few of chance we can connect through.
I capture network logs on pfsense and client at the same time, from logs on client side i found many retransmit and cause the connection stopped, while i checked logs on pfsense, i found syn/syc+ack, but looks like tcp packet didn't hit on wan interface
6bdc63c5-3d62-4aa2-8010-01c565ba1b7a-image.png

i did lots of tuning, such as re-install pfsense ce, enlarge the spec(cpu/mem), tuning parameters, but the same not work

we did the same on pfsense plus (23.09), looks like it works on pfsense plus.

so my question is:
1、is it possible known issue/bug for this case?
2、how should i trouble shoot further for this kind of issue; in another word, how could i check confirm where and how the packet drop?

Thanks much for your help!

]]>https://forum.netgate.com/topic/189405/pfsense-ce-2-7-2-configured-with-port-forwarding-packet-drops-randomly-pfsenseplus-looks-like-workRSS for NodeTue, 15 Sep 2026 06:05:59 GMTTue, 30 Jul 2024 11:53:57 GMT60<![CDATA[Reply to pfsense ce 2.7.2 configured with port forwarding, packet drops randomly (pfsenseplus looks like work) on Thu, 08 Aug 2024 07:52:59 GMT]]>i finally found the cause, i changed the 'Filter Rule association' from 'pass' to other, i then works
c64cd004-70ad-491e-b301-eafe18d333f1-image.png

but the thing is we have default gateway and even i allow all in firewall rule, but nat with filter rule association 'pass', nat still not forward the traffic; looks like it's the bug of pfsense
3375e8e7-e1fc-4306-8f6a-80cc70841df5-image.png

]]>https://forum.netgate.com/post/1179863https://forum.netgate.com/post/1179863Thu, 08 Aug 2024 07:52:59 GMT<![CDATA[Reply to pfsense ce 2.7.2 configured with port forwarding, packet drops randomly (pfsenseplus looks like work) on Thu, 01 Aug 2024 02:59:22 GMT]]>@Gertjan
thank you much for your help
For NAT reflection, even we tried to use options like system default/disbaled/pure NAT, the same not working

The thing is if I switch to use pfsense plus (23.09), which is under same subnet as pfsense CE, then the connectivity will be good;
I am a little bit suspect there is ongoing bug with pfsense CE

]]>https://forum.netgate.com/post/1178907https://forum.netgate.com/post/1178907Thu, 01 Aug 2024 02:59:22 GMT<![CDATA[Reply to pfsense ce 2.7.2 configured with port forwarding, packet drops randomly (pfsenseplus looks like work) on Tue, 30 Jul 2024 16:50:42 GMT]]>@allenlwli said in pfsense ce 2.7.2 configured with port forwarding, packet drops randomly (pfsenseplus looks like work):

but looks like tcp packet didn't hit on wan interface

If packets don't hit = arrive (right ?) at the pfSense WAN gate, your pfSense issues is solved, as the issue is upstream.

Not sure what this is :

afb3c08a-f61c-4236-bcbb-6bc3f24c334d-image.png

but for classic port and addresses NATing I never hat to take that setting from 'default'.

]]>https://forum.netgate.com/post/1178732https://forum.netgate.com/post/1178732Tue, 30 Jul 2024 16:50:42 GMT