Unable to disable firewall rule
-
I have a problem with pfSense 2.0.1 (i386) blocking all TCP:RA and TCP:PA packets. I've tried changing mode to "conservative" but it didn't help.
Firewall log shows the following rule is responsible for this:
scrub in on vr0 all no-df fragment reassemble
vr0 is LAN interface
What can i disable to remove this rule.
Thanks
-
That means you have asymmetric routing, those are not packets that create a connection (those would be TCP:S) those are part of an existing connection or an attempt to establish one.
The firewall rules only match on packets that create connections, so if (for example) the initial traffic takes a different path and pfsense only sees the return traffic, it gets blocked.
Some more information about the context in which you are seeing those errors would help.
