Version 26.1.3. Created a dnat rule from wan to machine on lan on a specific port. The access to the lan service from the wan is successful. However, when inspecting the states, and also using Inspect, I do not see the name of the rule referenced. To re-create:
Create dnat rule called 'xyz'
Under 'Firewall: NAT: Destination NAT' choose 'Register Rule'.
Invoke the rule traffic by accessing it via the wan.
Firewall: Rules [new] --> 'Inspect' --> no states are present.
Under 'Firewall: Diagnostics: States' --> filter on lan ip address --> column 'Rule' is blank.
(25.x did have a value of 'xyz.)
I'm not seeing this but a difference is that my DNAT rules are using 'manual' rather than 'register' (they are as they were before the migration to the new rules UI).
I also don't have any WAN translations, mine are just local redirects for DNS/NTP/NUT... but that probably makes no difference.
Maybe automatic rules don't get a label? I don't use them so am not sure, but it's worth maybe raising a GH ticket if you believe they do have labels and should be visible here.
I noticed the associated rules inherit the desciption from their (D)NAT parent, when using 'register rule'. I didn't experiment with the other options though.
Quote from: OPNenthu on March 09, 2026, 10:25:47 AMraising a GH ticket
Yes, I found some other minor issues, so I will do that. This applies when it is a brand new Rule[new] and using 'register rule'.
Screen shots and everything...
9917 (https://github.com/opnsense/core/issues/9917)