<![CDATA[Blocking TCP:RA, TCP:FPA,TCP:A]]>Hi all,

I have the attached rules in my LAN and OpenVPN IFs.  However, there are still rejected packets such as [Rst,Ack] and etc.. Do you have any idea of why?

thanks
logs.png
logs.png_thumb
openvpn_rules.png
openvpn_rules.png_thumb
lan_rules.png
lan_rules.png_thumb

]]>https://forum.netgate.com/topic/78849/blocking-tcp-ra-tcp-fpa-tcp-aRSS for NodeFri, 15 May 2026 20:58:41 GMTWed, 28 Jan 2015 14:13:13 GMT60<![CDATA[Reply to Blocking TCP:RA, TCP:FPA,TCP:A on Wed, 28 Jan 2015 17:17:21 GMT]]>Thanks for the answer.

]]>https://forum.netgate.com/post/512449https://forum.netgate.com/post/512449Wed, 28 Jan 2015 17:17:21 GMT<![CDATA[Reply to Blocking TCP:RA, TCP:FPA,TCP:A on Wed, 28 Jan 2015 16:46:26 GMT]]>This is typical out of state being blocked..

https://doc.pfsense.org/index.php/Why_do_my_logs_show_%22blocked%22_for_traffic_from_a_legitimate_connection

]]>https://forum.netgate.com/post/512434https://forum.netgate.com/post/512434Wed, 28 Jan 2015 16:46:26 GMT<![CDATA[Reply to Blocking TCP:RA, TCP:FPA,TCP:A on Wed, 28 Jan 2015 14:34:31 GMT]]>No advanced firewall rules.

Can this be because of an invalid flag for the current state of TCP connection?

]]>https://forum.netgate.com/post/512360https://forum.netgate.com/post/512360Wed, 28 Jan 2015 14:34:31 GMT<![CDATA[Reply to Blocking TCP:RA, TCP:FPA,TCP:A on Wed, 28 Jan 2015 14:20:40 GMT]]>Did you set any advanced features on the FW rules (LAN side?).
Seems to me like it should work.

]]>https://forum.netgate.com/post/512347https://forum.netgate.com/post/512347Wed, 28 Jan 2015 14:20:40 GMT