OPNsense Forum

Archive => 17.1 Legacy Series => Topic started by: Nnyan on July 25, 2017, 10:10:15 pm

Title: firewall alerts
Post by: Nnyan on July 25, 2017, 10:10:15 pm
Hello all, a little while back I had to reinstall OPNSense after a power strike where my backed up settings would restore.  I had pretty good notes on the changes I made so I think I'm back to where I was before the power strike except one thing.  I'm getting constant connection attempts to my PLEX box and a few other things.  2-3K a week.  I notice these b/c I have a Cujo and Rattrap security appliances as a "sanity check" and an additional layer of protection (typically I just run Rattrap inline from the OPNSense LAN port that goes to my HP Switch).   

Prior to reinstalling I was getting zero notifications of these types b/c they were being blocked by OPNSense.  I have gone over everything ten times and I can't figure out what I'm missing (didn't enable or setup) to have OPNSense automatically block these connection attempts.  I have IPS/IDS turned on, UPnP turned off, etc...

Anyway, if anyone has some suggestions I would greatly appreciate it.  Thank you in advance!