Messages

I also tried blocking the same rule, and this was respected. But the allow (right above it) is ignored.

Any idea why this wouldnt be working?

__timestamp__   2025-11-24T10:28:48-08:00
ack   1184052709
action    [block]
dst   X.X.X.X

label   Default deny / state violation rule

reason   match

Pass
 Interface   
LAN
 Direction   
in
 TCP/IP Version   
IPv4
 Protocol   
TCP
 Source / Invert    Use this option to invert the sense of the match.
 Source   
Single host or Network
192.168.2.214/32

Source   
Destination / Invert    Use this option to invert the sense of the match.
 Destination   
Any

 Destination port range   
from:
 Destination port range   
from:   to:

any

How do I troubleshoot a defunct WAN connection? It looks okay to me but is in a defunct state. The data in the gateway log looks the same as the ones that are not defunct.

Wireless3 Wireless3 IPv4 defunct 9.9.9.9 43.3 ms 8.0 ms 0.0 %

I have a hyper-v vm running opnsense that has been working for years. I rebooted it the other day and notice its stuck on Configuring WAN12 interface. It never gets past this spot. So I removed a nic, let it reset the defaults and added a new nic. Configured everything, rebooted and I get the same thing. How do i get to the bottom as to why this is getting stuck?

Factory reset on device and ripped everything out of Opnsense and rebuilt (for this connection) and all is well now.

I checked the firewall log and it shows a successful connection. Unbound also shows nothing of interest but the DNS resolution is successful as confirmed by the successful firewall entries.

I am having trouble with a single device for internet access.

I have 4 devices set up in my Gateway group.

When 1 of the 4 is set as the Tier 1 device, I am able to ping out through the device and the firewall shows that is allowing http(s) requests, but I am unable to browse and get a Hmmmm....cant reach the page error. Browsing works fine if I connect via wireless to this same device.

Any thoughts as nothing seems obvious and I dont know where else to look in logs that would help?

I disabled the gateway and was able to ping. So what gives?

One more thing I found which was odd.

When I ping from my device (in the LAN), it shows both a ping from my device as well as a simultaneous ping from another ip and vlan (happens to be on the network of one of my internet connections).

I have several vlans on my network. I am trying to get traffic to traverse from the LAN to a network I have labeled Server. The firewall logs show that the traffic makes it through yet it is not making it through as I cannot reach the resources. I have a rule in the firewall set up to allow all traffic from Lan to Server. I do not have this same problem with a different vlan called Kids. It has the same rule and is able to traverse.

What am I missing?

Not sure why this isn't working but I set up a new box and moved one of my modems to it and tested and its working. Ill be rebuilding my config now.

I will add that this shows up in my firewall log when I test the nat type

Not sure what else to test but this doesn't work for me and I could really use some help.

Anything else I can do to troubleshoot as this does not seem to be working in my environment?

What else should I do then, as I have set up the outbound nat rule and it is still not working.