Blocking TCP:RA, TCP:FPA,TCP:A

localhostx · Jan 28, 2015, 2:16 PM

Hi all,

I have the attached rules in my LAN and OpenVPN IFs. However, there are still rejected packets such as [Rst,Ack] and etc.. Do you have any idea of why?

thanks

GroundX · Jan 28, 2015, 2:20 PM

Did you set any advanced features on the FW rules (LAN side?).
Seems to me like it should work.

localhostx · Jan 28, 2015, 2:34 PM

No advanced firewall rules.

Can this be because of an invalid flag for the current state of TCP connection?

johnpoz · Jan 28, 2015, 4:46 PM

This is typical out of state being blocked..

https://doc.pfsense.org/index.php/Why_do_my_logs_show_%22blocked%22_for_traffic_from_a_legitimate_connection

localhostx · Jan 28, 2015, 5:17 PM

Thanks for the answer.