Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Odd blocking problem

    Firewalling
    3
    3
    419
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      ducasse last edited by

      This is on a fresh install of 2.2.5, and I can't figure out what is going on. There is a default rule to allow all from the LAN to any destination, but still I'm seeing packets from the inside to ports 80 and 443 dropped from certain hosts.

      I added a rule to allow all TCP+UDP packets from 192.168.0.0/24 to any destination, but packets were still being blocked from two hosts - 192.168.0.201 and 192.168.0.108 - I had to add yet another host-specific rule to allow .201 before those finally went through, and .108 is still being blocked.Default deny rule IPv4 (1000000103)

      What could cause this? I now have three rules (and seem to need one more) where only the default rule should be necessary - how can I debug this?

      EDIT: I enabled showing what rule does the blocking in the log viewer, and it says "Default deny rule IPv4 (1000000103)".

      1 Reply Last reply Reply Quote 0
      • H
        Harvy66 last edited by

        Probably out of state packets, but show what was dropped.

        1 Reply Last reply Reply Quote 0
        • johnpoz
          johnpoz LAYER 8 Global Moderator last edited by

          yeah lets see the blocks and the rule for your lan.. More than likely it was out of state traffic being blocked.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense Plus
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy