disabling a firewall rule doesnt stop traffic
-
Hi
I have multiple LANS on seperate hardware ports and have applied basic rules for the following
LAN to LAN2
ICMP - Allow
80 - allow
554- allow
443 - allow.Before creating these rules there is no ping from LAN to LAN2. When i create the rules ping and the other rules above work as expected. I can connect to the device on 443 and streams its video over 554.
Heres my issue, and possibly some simple explanation. If i then disable the rules all traffic still works as if the rule is still enabled. If i reboot the firewall then traffic stops again until i enable the rules once more. If i then disable again the traffic still passes.
Seems odd but i'm probably missing something, any help appreciated.
Thanks
-
@frank451 because the state has been created, and this state continues to allow traffic.. Either kill the state(s), wait for it to timeout on its own.
Go to diagnostics states and either kill the specific states, or use the reset all states.
-
@johnpoz ah ok thanks for replying, what is the auto time out period?
cheers
-
@frank451 a state can continue forever unless there is no traffic, then it will time out after 24 hours.. Unless one side on purpose closes it with a fin or rst, etc.
Under advanced firewall and nat you can see the default timers.
-
@johnpoz brilliant thank you
PS. working as now as mentioned tested with ping and looks like default is 20 seconds on ICMP.
thank you again
