I read the release notes, I reviewed the Migration Assistant, then I followed the steps. This included exporting my rules and adjusting **interface** to *lan* where it was *blank* and **ipprotocol** to *inet* when it was *inet46*. Everything appeared to work, and the Firewall | Migration Assistant has disappeared.
After this process I have the following status:
- Firewall | Rules | interface rules has my original rules
- Firewall | NAT | Source NAT | interface rules has my imported rules
- Removing the Firewall | Rules causes my local network to fail to resolve amything/li]
I had assumed that the firewall rules would be gone, replaced by the Source NAT rules. What am I missing?
Quote from: instantdreams on October 23, 2026, 08:01:19 PMWhat am I missing?
The fact that these two require !! 2 seperate migrations !! :
-
Firewall Rules (Legacy) to
Firewall Rules [new]This
[new] variant becomes Firewall Rules after the migration.
-
Outbound NAT Rules to
Source NAT RulesThis becomes just Source NAT Rules after the migration.
TL;DR : I think you misunderstood the whole thing ?!
Quote from: instantdreams on October 23, 2026, 08:01:19 PMWhat am I missing?
Source NAT rules do not replace firewall rules. If you remove the Firewall Rules, there are no policies left to permit traffic from the LAN,so DNS and connectivity stop working
@ nero355 — very clear explanation