OPNsense Forum

Archive => 24.1, 24.4 Legacy Series => Topic started by: milad on March 15, 2024, 08:07:12 PM

Title: how to edit Default deny / state violation rule?
Post by: milad on March 15, 2024, 08:07:12 PM
hi my friends
In my firewall live view
Some of my authorized IPs are blocked
How can I unblock؟
https://s8.uupload.ir/files/screenshot_1402-12-25_at_22.33.29_ijb7.png
Title: Re: how to edit Default deny / state violation rule?
Post by: tiermutter on March 15, 2024, 08:23:59 PM
Does everything work? Then it is most likely out of state packets you do not need to worry about.
See also https://forum.opnsense.org/index.php?topic=36850.0
Title: Re: how to edit Default deny / state violation rule?
Post by: milad on March 15, 2024, 08:34:30 PM
Quote from: tiermutter on March 15, 2024, 08:23:59 PM
Does everything work?
No, it doesn't work
I must allow access to these ips
Title: Re: how to edit Default deny / state violation rule?
Post by: tiermutter on March 15, 2024, 10:13:42 PM
Since source and destination are different subnets, you need rules to allow such traffic. Have you?
What interfaces are configured and how are those subnets from screenshot related to them?
Title: Re: how to edit Default deny / state violation rule?
Post by: milad on March 15, 2024, 11:17:35 PM
Quote from: tiermutter on March 15, 2024, 10:13:42 PM
Since source and destination are different subnets, you need rules to allow such traffic. Have you?
What interfaces are configured and how are those subnets from screenshot related to them?
I have just one interface Lan. 
opnsense 192.168.10.78    GATAWAY: 192.168.10.1(ip my router)

and web service 192.168.10.83   GATEWAY :192.168.10.78

my zabbix server 192.134.144.2 , opnsense access to zabbix server but web service not access

Sorry. My English is not good :)  thanks my friend to help me
Title: Re: how to edit Default deny / state violation rule?
Post by: milad on March 15, 2024, 11:19:55 PM
Quote from: milad on March 15, 2024, 11:17:35 PM
Quote from: tiermutter on March 15, 2024, 10:13:42 PM
Since source and destination are different subnets, you need rules to allow such traffic. Have you?
What interfaces are configured and how are those subnets from screenshot related to them?
I have just one interface Lan. 
opnsense 192.168.10.78    GATAWAY: 192.168.10.1(my ip router)

and web service 192.168.10.83   GATEWAY :192.168.10.78

my zabbix server 192.134.144.2 , opnsense access to zabbix server but web service not access

Sorry. My English is not good :)  thanks my friend to help me
Title: Re: how to edit Default deny / state violation rule?
Post by: tiermutter on March 16, 2024, 01:12:57 AM
The IP of your zabbix is not a private address (and out of your LAN subnet) you must not use. Change it to an address in your subnet, eg 192.168.10.2