<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Viewing Automatic Outbound Nat rules]]></title><description><![CDATA[<p dir="auto">Hello am having with my setup. I have 2 PFsense routers connected trough IPsec and a openvpn roadwarrior connection to PF1. But ever sins I set Outbound NAT to manual to have internet on the roadwarrior via PF1. it creates an issue between PF1 and PF2, the issue only arises once every week but they lose connection between PF1 and 2</p>
<pre><code>racoon: ERROR: phase1 negotiation failed due to time up. 9d096a48d0469ca1:0000000000000000
</code></pre>
<p dir="auto">The only change that I have made sins these errors started is have internet flow via PF1 by changing NAT to manual. The current manual rules are:</p>
<p dir="auto">WAN | Openvpn subnet<br />
WAN | Any</p>
<p dir="auto">By knowing which rules are created in auto mode I hope to solve my issue. But any insight into my problem would be much appreciated</p>
<p dir="auto">Edit:<br />
Added a screanshot of the outbound rules<br />
<img src="/public/_imported_attachments_/1/Naamloos.png" alt="Naamloos.png" class=" img-fluid img-markdown" /><br />
<img src="/public/_imported_attachments_/1/Naamloos.png_thumb" alt="Naamloos.png_thumb" class=" img-fluid img-markdown" /></p>
]]></description><link>https://forum.netgate.com/topic/29510/viewing-automatic-outbound-nat-rules</link><generator>RSS for Node</generator><lastBuildDate>Mon, 05 Oct 2026 17:26:16 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/29510.rss" rel="self" type="application/rss+xml"/><pubDate>Sun, 09 Jan 2011 21:54:39 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Viewing Automatic Outbound Nat rules on Mon, 10 Jan 2011 11:29:45 GMT]]></title><description><![CDATA[<p dir="auto">At the moment am not using CARP. Perhaps using openvpn for the site to site connection would be wise, Sins am not using filtering on vpn-traffic at this moment</p>
]]></description><link>https://forum.netgate.com/post/259958</link><guid isPermaLink="true">https://forum.netgate.com/post/259958</guid><dc:creator><![CDATA[eddie4]]></dc:creator><pubDate>Mon, 10 Jan 2011 11:29:45 GMT</pubDate></item><item><title><![CDATA[Reply to Viewing Automatic Outbound Nat rules on Mon, 10 Jan 2011 02:49:26 GMT]]></title><description><![CDATA[<p dir="auto">The only difference between what you have and the automatic rules is the source "any" also applies to traffic initiated by the firewall itself, if you're using a CARP IP for IPsec that would break its outbound traffic.</p>
]]></description><link>https://forum.netgate.com/post/259901</link><guid isPermaLink="true">https://forum.netgate.com/post/259901</guid><dc:creator><![CDATA[cmb]]></dc:creator><pubDate>Mon, 10 Jan 2011 02:49:26 GMT</pubDate></item></channel></rss>