[SOLVED] Firewall rule not blocking

kgmoney

Hi,

I have a WAN port and a LAN port. On the LAN port I have connected my devices via a dumb switch. I've created a firewall rule as follows:

Action: Block
Disable: False
Interface: LAN
TCP/IP Version: IPv4
Protocol: any
Source: (single host) 192.168.0.20/31
Destination: any

However, if I watch my WAN traffic with Wireshark, I still see UDP traffic headed out to the internet. I know this traffic is coming from 192.168.0.20 because if I watch the LAN side, I can see it's the only one sending to those internet IP addresses.

Very confused :(

Thanks,
Kevin

ptt

Please post a screenshot of your LAN Firewall Rules Tab.

https://doc.pfsense.org/index.php/Firewall_Rule_Processing_Order

https://doc.pfsense.org/index.php/Firewall_Rule_Troubleshooting

kgmoney

Yes! Thank you for those links!

I forgot about rule ordering :o Moved my rule, and reset the states table and all is well.

Thanks,
Kevin