OPNsense Forum

Archive => 17.7 Legacy Series => Topic started by: greg on October 29, 2017, 09:46:06 pm

Title: [resolved] disable anti flood
Post by: greg on October 29, 2017, 09:46:06 pm

I've just installed OPNSense; it's working ok, I can have traffic in/out, but when trying to use a sustained stream such as rtmp, it stops after a few kB. If I disable the firewall, the stream goes on, so I guess there is some kind of flood prevention enabled. Is there a way to disable it? Thanks in advance

Title: Re: disable anti flood
Post by: franco on October 30, 2017, 09:30:18 am

Hey Greg,

TCP streaming protocols can have a negative effect on state tracking. You can see your traffic being blocked by the default rule in the firewall logs probably...

If that is the case, you can add a floating rule for your RTMP traffic, go to the advanced section of the rule and  change state tracking to either sloppy or none, whatever works best.


Cheers,
Franco

Title: Re: disable anti flood
Post by: greg on October 30, 2017, 11:20:50 am

Sweet! you nailed it :) I disabled the stateful inspection and it's working :)
Now I just have to install it instead of running the live usb
Thanks a lot!

Title: Re: [resolved] disable anti flood
Post by: franco on October 30, 2017, 12:04:54 pm

yay :)

Title: Re: [resolved] disable anti flood
Post by: greg on November 01, 2017, 10:22:37 am

So RTMP is working, then I activated the DHCP for mobile devices to use OPN as the gateway. Now the symptoms are:

- web is erratic, mostly working, sometimes timeout
- speedtest gives ping ok, bandwidth down ok, bandwith up = 0.00

(as for the original problem, if I disable FW or use the cable modem as GW, things are good)

Following your advice I created a FW rule to disable stateful inspection ; I also tried to enable NAT. Nothing...

Any idea?

Thanks in advance