Firewall bloking DMZ after Haltsystem?



  • I had to shutdown the system to moove some cables and ect.
    I turned the power back on and was noticing i couldn't ping anything or download updates to my servers.

    i can see that Pfsense is blocking connection from 10.0.2.4 to 8.8.8.8 (Default deny rule IPv4 (1000000103) and everything else there is outgoing (Except my wordpress and owncloud servers they arent having any problems at all?)

    i tried to do a cat  /tmp/rules.debug and did findt this :

    |

    default deny rules

    #–-------------------------------------------------------------------------
    block in log inet all tracker 1000000103 label "Default deny rule IPv4"
    block out log inet all tracker 1000000104 label "Default deny rule IPv4"
    block in log inet6 all tracker 1000000105 label "Default deny rule IPv6"
    block out log inet6 all tracker 1000000106 label "Default deny rule IPv6" |

    but i can't figure out how i can "unblock" this. it is odd because i can upload files to my owncloud and wordpress server withouth any problems?




  • i can see that Pfsense is blocking connection from 10.0.2.4 to 8.8.8.8

    What type of connection?  Your rules only allow a few protocols and ICMP (ping) isn't one of them.



  • @KOM:

    i can see that Pfsense is blocking connection from 10.0.2.4 to 8.8.8.8

    What type of connection?  Your rules only allow a few protocols and ICMP (ping) isn't one of them.

    well this was unexpected…..
    i tried to allow any - any from DMZ and then removed it again so i was back to the settings above, and then everything is working again..



  • Did you remember to Apply the changes after edit?  It's hard to miss but I've done it at least once when I was in a hurry.



  • @KOM:

    Did you remember to Apply the changes after edit?  It's hard to miss but I've done it at least once when I was in a hurry.

    Yep i did :) but the last time i edited the rules was abouth a month ago and everything was working flawless until i rebooted ?

    But it could have been a possibility it wouldn't have been the first time i forgot to hit apply :D