@5 block drop in log inet all label "Default deny rule IPv4"

probie

Greetings,

I am running into this issue and can't seem to solve it. After navigating through the forum, I can not find the solution. Saw JimP suggestion to do the following but it did not help.
<system>Advanced, Firewall/NAT Tab: Check "Bypass firewall rules for traffic on the same interface">

Please help. My setting are: pfs2.1, 3 nic: WAN LAN2(172.17.17.0)/24, LAN1(172.19.19.0/20) with one static route. I get it on both LAN interface.

Thank you in advance.</system>

Matthias

What exactly is your problem? Is traffic that you need to pass being blocked? You say you have 3 physical nics. The Bypass firewall rules for traffic on the same interface option shouldn't make a difference then. Where are you trying to get your traffic?

johnpoz

What is in the logs exactly?

probie

Matthias/johnpoz

I get a bunch of block message from the log saying IPs from subnet on LAN1 and LAN2 is being block to like port 80, 443, 993, and etc when there are no define rules to block them.

blockrules.png_thumb

johnpoz

Those are common they are NOT syn. I see them all the time as well from my son's phone mostly.

https://doc.pfsense.org/index.php/Logs_show_%22blocked%22_for_traffic_from_a_legitimate_connection,_why%3F

probie

Thanks johnpoz. I was reading further in the forum and saw yours and jimp's posting on the same link under a different topic header. I guess this is normal.