Odd blocking problem

[ducasse]

This is on a fresh install of 2.2.5, and I can't figure out what is going on. There is a default rule to allow all from the LAN to any destination, but still I'm seeing packets from the inside to ports 80 and 443 dropped from certain hosts.

I added a rule to allow all TCP+UDP packets from 192.168.0.0/24 to any destination, but packets were still being blocked from two hosts - 192.168.0.201 and 192.168.0.108 - I had to add yet another host-specific rule to allow .201 before those finally went through, and .108 is still being blocked.Default deny rule IPv4 (1000000103)

What could cause this? I now have three rules (and seem to need one more) where only the default rule should be necessary - how can I debug this?

EDIT: I enabled showing what rule does the blocking in the log viewer, and it says "Default deny rule IPv4 (1000000103)".

[Harvy66]

Probably out of state packets, but show what was dropped.

[johnpoz]

yeah lets see the blocks and the rule for your lan.. More than likely it was out of state traffic being blocked.