OPNsense Forum

English Forums => 26.1, 26,4 Series => Topic started by: johnjces on June 05, 2026, 06:27:40 PM

Title: 26.1.9 Rule (new), future releases and auto rule add
Post by: johnjces on June 05, 2026, 06:27:40 PM
I am currently on 26.1.9. Being Fat, Dumb and Happy, (and getting old), I have upgraded a couple times in the new 26.X.X version and just today noticed Rules (new)!!!!

I have exported, reviewed the CSV, (actually semicolon delimited), and found nothing weird, ASFAIK, and imported them back. Over the next hours and days, I will disbale the old rules one by one and check to ensure things work as they should. Anything else I should know or any gotchas?

The main reason for this post is; if and when I add a new port forward under NAT, (and might this area change?), must I now manually create a new firewall rule (Post NAT or Pre-NAT rule... I don't know), which was automatically created before under the old rules? I have read that one must now add the appropriate firewall rule here after adding a new NAT rule, I.E. port forward etc. If so, will this be the norm from now on with future releases? Being more a home user these days, port forwards to new cameras and stuff seems to be the highlight of my days!

Thanks!

John
Title: Re: 26.1.9 Rule (new), future releases and auto rule add
Post by: Monviech (Cedrik) on June 05, 2026, 10:09:14 PM
Hello,

if you dont need anything special, you can set the NAT rule to "Pass", that wil automatically allow traffic matching it, but you will not see the firewall rule. Its a built in pf feature that renders the NAT rule as "rdr pass" rule, a mix of NAT and firewall rule.
Title: Re: 26.1.9 Rule (new), future releases and auto rule add
Post by: johnjces on June 06, 2026, 02:22:36 AM
@Monviech (Cedrik)

Thank-you for the reply, but...

1). does this mean OPNSense will not automatically create that firewall rule from now on?

To be clear, once I create a NAT rule; port forward, etc...

2). I must then go into the Rules (new) and create another rule to allow this traffic to pass? Something that was once done automatically?

It doesn't seem tough to do but just odd they stopped this if this is the case. Spoiled I guess!!

John