Messages

1

24.1 Legacy Series / Re: Strange forwarding issue (Gateway and interVLAN)

« on: April 15, 2024, 05:58:09 pm »

No, none of those....

In the log I can't find any blocked traffic unfortunately, it seems all of a sudden the firewall stops forwarding:

-InterVLAN
-From VLAN outward to the Internet

On the Google TV (Nvidia Shield) I have disabled at all IPv6 and I also set IP address to static while troubleshooting for any possible DHCP issue.

But I have a feeling now it's all the devices having issues but I noticed only this one for now.

What seems to make it work again is to apply any saving in on the Interface page of OPNsense and apply.
Like if it was flushing or restarting something.

Forgot to mention OPNSense is running in a ESXi VM....

2

24.1 Legacy Series / Strange forwarding issue (Gateway and interVLAN)

« on: April 15, 2024, 01:10:11 pm »

Hi,

version 24.1.4
Using UnboundDNS

I have 3x VLANs.
On one of them I have a Google TV device.

All working fine, but for some reason every so often OPNSense seems to stop this device from crossing the gateway, and it cannot exit to Internet nor reach other VLANs.
but strangely the device is active and reachable from the same VLAN.
If I restart the networking or reboot the Google TV, it connects to Internet again but again after 15-20 minutes the same behaviour happens again.
I can't find much logs to understand what happens and would appreciate some direction where to look!
thanks

3

General Discussion / Re: Awkward behaviour Default Block in interVLAN

« on: April 04, 2024, 02:38:26 pm »

Most probably a case of asymmetric routing. Make sure packets travel the same way in both directions.

Patrick, that was the greatest hint!
it was indeed the SMB server set with the old Default Gateway which was still active!
fixed the asymmetric routing it solved it!

thanks a LOT!

4

General Discussion / Awkward behaviour Default Block in interVLAN

« on: April 04, 2024, 01:23:54 pm »

Hi all
mine is a simple home installation, with a Service VLAN where I host services and a User VLAN where all the user device stay.

I am trying to simply access an SMB NAS server on the Service VLAN from the user User VLAN.
What happens is that I manage to access the drive and see the directories, I even manage to start the file transfer, but then it drops aftes about 20 sec.
From the log I can see that it firsts hits the Default Allow Rule but then after those 20 seconds it hits the Default Deny Rule.
I cannot explain that as SRC, DST, ports etc should be identical!

I am running 24.1.2_1 on an ESXi server... VLANs are implemented via the vSwitch.

Unless I am missing something clearly obvious,
I am wondering whether there is something weird caused by the hypervisor setup rather.

any help woudl be much appreciated!

Attached a picture side by side with the ALLOWED VS DENIED hit.