OPNsense Forum

English Forums => 26.1 Series => Topic started by: rolsch on February 10, 2026, 08:19:09 PM

Title: Firewall: NAT: Destination NAT: created rules with label not filled in ive log
Post by: rolsch on February 10, 2026, 08:19:09 PM
Hi.

I see that a "Firewall: NAT: Destination NAT" rule with description "abcd" is not presented in the "Firewall: Log Files: Live View" Label section.
Only the label "rdr rule" is shown was complicated the analyse/finding the correct rule.

- bug/feature or what?

Title: Re: Firewall: NAT: Destination NAT: created rules with label not filled in ive log
Post by: OPNenthu on February 10, 2026, 09:08:15 PM
Quote from: rolsch on February 10, 2026, 08:19:09 PMOnly the label "rdr rule" is shown

Yes, DNAT rules get logged with 'rdr rule'.  Some context on that: https://forum.opnsense.org/index.php?topic=45348.msg226752#msg226752

If you have a separate rule to pass the associated traffic and enable logging on that, then you'll see that label.  For example this is what a couple NTP redirects looks like ('rdr' followed by 'pass'):

nat-logging.png

Do you have associated pass rules for your DNAT rules?  I don't remember off the top of my head but I'd imagine that if you are using implicit pass on the NAT rule then you'll only see the 'rdr' logged.