Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login
    Introducing Netgate Nexus: Multi-Instance Management at Your Fingertips.

    Lan to Lan traffic not passing without adding additional rule for it

    Scheduled Pinned Locked Moved Firewalling
    5 Posts 3 Posters 907 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H Offline
      Heimire
      last edited by

      We have a rule that allows all lan traffic to pass everywhere.
      But for some reason it would not allow certain type of traffic.

      Any idea why the last rule in the image is needed?

      1 Reply Last reply Reply Quote 0
      • DerelictD Offline
        Derelict LAYER 8 Netgate
        last edited by

        It's not needed.  It does nothing.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • H Offline
          Heimire
          last edited by

          @Derelict:

          It's not needed.  It does nothing.

          but without it the traffic does not pass.

          1 Reply Last reply Reply Quote 0
          • DerelictD Offline
            Derelict LAYER 8 Netgate
            last edited by

            Look at the firewall logs and see what rule is blocking it.  You can also put the rule back and enable logging.

            Something is not how you think it is because what you're describing is pretty much not possible.

            I see HA_SYNC.  Are you sure both units have the pass any any rule?  Are you sure you're making changes on the correct unit?

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • johnpozJ Online
              johnpoz LAYER 8 Global Moderator
              last edited by

              Yeah you have a any any rule, that more specific rule below it would never even trigger..  So as mentioned, lets see your firewall rule when you take that out, and then lets see the traffic pass thru that rule by logging it, etc.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 26.03.1 | Lab VMs 2.8.1, 26.03.1

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.