OPNsense Forum

English Forums => 26.7 Series => Topic started by: seed on July 15, 2026, 07:40:23 PM

Title: 26.7 after upgrade IPv4 DestNAT stopped working
Post by: seed on July 15, 2026, 07:40:23 PM
I have migrated all rules to the new rules. Including NAT and everything. Worked fine.
Today i had to rollback a snapshot for the first time since DestNAT for IPv4 stopped working entirely.
I copied my existing rule and saved but it still was broken.

After rolling back DestNAT was working again.

EDIT:
I migrated my rules and NAT rules to new a while ago.
Title: Re: 26.7 after upgrade IPv4 DestNAT stopped working
Post by: Ametite on July 16, 2026, 02:01:02 PM
Same as me, but if you choose in NAT rule --> options ->> firewall rule (pass) it works again, so I think there's something wrong in the fw rules(?).

P.s. The rules was already migrated to DNAT and they were working with the last 26.1 version.

Here the firewall log, I can see the allow rule and a block one. The fw rule is now "allow from WAN to LAN dst IP + DST port", the DNAT rule is "from WAN port to LAN dst IP + DNAT port".

EDIT:
I's the combination of DNAT & divert-to rule (Suricata).
https://github.com/opnsense/src/issues/303 (https://github.com/opnsense/src/issues/303)