"Quote from: mimugmail on July 02, 2018, 06:07:32 AM
Seems like asym routing. Is there a second device routing?
Brilliant! I had a default route on my L3 switch that wasn't what it should have been. Thank you for the pointer in the right direction!!
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages1
#1
18.1 Legacy Series / Re: Identical traffic randomly matches different rules
July 03, 2018, 01:05:04 AMBrilliant! I had a default route on my L3 switch that wasn't what it should have been. Thank you for the pointer in the right direction!!
#2
18.1 Legacy Series / Identical traffic randomly matches different rules
July 02, 2018, 01:05:15 AM
I installed OPNsense as a VM on ESXi 6.7 host
Host: i3 8100 (quad core), 32GB RAM, Mellanox ConnectX-2 10gb EN NIC
VM: 1 vCPU, 1 GB RAM, 40GB disk, 2 VMXNET3
WAN: Comcast XB3 gateway/AP
Disabled hardware CRC, TSO, LR, VLAN filtering
FYI, when I had IPv6 enabled, the whole system went bezerk continuously. I had it all typed out and lost my post...
But, when I disabled IPv6, the thing is acting mostly sane. The big issue I am seeing is that LAN-LAN traffic is getting randomly blocked. I even set a firewall rule to allow and log for my laptop IP and my ESXi host IP. It is really crazy because it randomly goes from getting allowed with my rule, allowed with "let out anything from firewall host itself" to getting denied by the Default Deny. See the screenshot. My laptop is 10.56.19.107
Any idea how this is even possible? Why does the same traffic hit match different rules randomly? I just have a static route from my LAN interface 10.56.19.0/25(twenty-five) over to 10.56.20.0/24
Thanks!
Aaron
Host: i3 8100 (quad core), 32GB RAM, Mellanox ConnectX-2 10gb EN NIC
VM: 1 vCPU, 1 GB RAM, 40GB disk, 2 VMXNET3
WAN: Comcast XB3 gateway/AP
Disabled hardware CRC, TSO, LR, VLAN filtering
FYI, when I had IPv6 enabled, the whole system went bezerk continuously. I had it all typed out and lost my post...
But, when I disabled IPv6, the thing is acting mostly sane. The big issue I am seeing is that LAN-LAN traffic is getting randomly blocked. I even set a firewall rule to allow and log for my laptop IP and my ESXi host IP. It is really crazy because it randomly goes from getting allowed with my rule, allowed with "let out anything from firewall host itself" to getting denied by the Default Deny. See the screenshot. My laptop is 10.56.19.107
Any idea how this is even possible? Why does the same traffic hit match different rules randomly? I just have a static route from my LAN interface 10.56.19.0/25(twenty-five) over to 10.56.20.0/24
Thanks!
Aaron
Pages1
