OPNsense Forum

English Forums => General Discussion => Topic started by: gnomee on February 15, 2023, 02:49:49 PM

Title: Strange Firewall rule processing
Post by: gnomee on February 15, 2023, 02:49:49 PM
I am really baffled by this. I have a firewall rule that sometimes gets missed, screenshots attached. What am I missing? Why does it sometimes endup with the standard floating rule "Default deny / state violation rule"?
Title: Re: Strange Firewall rule processing
Post by: Demusman on February 15, 2023, 03:18:41 PM
What does "standard Floating rule" mean?

What interface is that rule on?
You shouldn't be using floating rules unless you absolutely have to.
Title: Re: Strange Firewall rule processing
Post by: gnomee on February 15, 2023, 03:22:14 PM
It's the top "Automatically generated rules", notice it's "last match".
Title: Re: Strange Firewall rule processing
Post by: chemlud on February 15, 2023, 03:26:20 PM
It is what it says: State violation. No state, no traffic.

Do a package capture and watch your "Nest" at work. Most likely it tries to reuse the tcp connection that is already closed and then starts a fresh session (passed).
Title: Re: Strange Firewall rule processing
Post by: gnomee on February 15, 2023, 04:03:31 PM
Indeed you are correct sir. Much appreciated.