Hello all, a little while back I had to reinstall OPNSense after a power strike where my backed up settings would restore. I had pretty good notes on the changes I made so I think I'm back to where I was before the power strike except one thing. I'm getting constant connection attempts to my PLEX box and a few other things. 2-3K a week. I notice these b/c I have a Cujo and Rattrap security appliances as a "sanity check" and an additional layer of protection (typically I just run Rattrap inline from the OPNSense LAN port that goes to my HP Switch).
Prior to reinstalling I was getting zero notifications of these types b/c they were being blocked by OPNSense. I have gone over everything ten times and I can't figure out what I'm missing (didn't enable or setup) to have OPNSense automatically block these connection attempts. I have IPS/IDS turned on, UPnP turned off, etc...
Anyway, if anyone has some suggestions I would greatly appreciate it. Thank you in advance!