Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    TCP firewall block

    Scheduled Pinned Locked Moved Firewalling
    3 Posts 3 Posters 897 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      loriszigliani
      last edited by

      Hi,
      I'm new in pfsense world, i'm italian. Sorry for my english.
      I tell you my problem:
      -the firewall block every tcp connection from wan.
      -the firewall block every connection from lan to internet without the traffic run through to the gateway.

      My network topology:
      internet <–-2.230...(ip static)---> router (ip: 192.168.1.254/24) <-----> PFSense firewall (wan ip:192.168.1.65/24)<-----> lan net ip:192.168.2.0/24

      Often my internet connection seems slowly because firewall block every tcp connection.
      Please can you help me.

      ![Senza titolo.png](/public/imported_attachments/1/Senza titolo.png)
      ![Senza titolo.png_thumb](/public/imported_attachments/1/Senza titolo.png_thumb)
      ![Schermata 2014-12-03 alle 01.46.30.png](/public/imported_attachments/1/Schermata 2014-12-03 alle 01.46.30.png)
      ![Schermata 2014-12-03 alle 01.46.30.png_thumb](/public/imported_attachments/1/Schermata 2014-12-03 alle 01.46.30.png_thumb)
      ![Schermata 2014-12-03 alle 01.46.42.png](/public/imported_attachments/1/Schermata 2014-12-03 alle 01.46.42.png)
      ![Schermata 2014-12-03 alle 01.46.42.png_thumb](/public/imported_attachments/1/Schermata 2014-12-03 alle 01.46.42.png_thumb)
      ![Schermata 2014-12-03 alle 01.47.00.png](/public/imported_attachments/1/Schermata 2014-12-03 alle 01.47.00.png)
      ![Schermata 2014-12-03 alle 01.47.00.png_thumb](/public/imported_attachments/1/Schermata 2014-12-03 alle 01.47.00.png_thumb)

      1 Reply Last reply Reply Quote 0
      • H
        Harvy66
        last edited by

        It's blocking FIN packets, which are to close the connection. This seems to happen a lot; the connection will get closed, and the other side will attempt to send more FIN packets after the fact.

        Unless you're having issues with connections, this is probably just harmless out-of-state packets getting dropped.

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          yes out of state would be blocked..

          Is that first picture your wan rules?  Sure looks like it from the fact one of the dest is wan address? and then 2nd pic is clearly your lan.

          Those rules make no sense..  Why would you allow 1024-65k to your WAN address?  And how would your lan segments ever be a source as inbound traffic on the wan?  As to that block to 80.. That would blocked and logged by default rule.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.