"
I'm sorry, I'm not OP, having the same experience, and I don't think I fully understand the answer given, and whether there is or is not a problem with the OP's setup.
I turned on logging for the rule that I thought was being triggered in the VLAN, and that shows that the PASS was via the "Allow internet only" rule I have in the VLAN, but then immediately after the WAN records the "let out anything from firewall".
Log entries:
WAN 2025-07-29T19:49:25-04:00 192.168.1.242:25430 72.125.64.41:443 tcp let out anything from firewall host itself (force gw)
MY_VLAN_10 2025-07-29T19:49:25-04:00 192.168.110.100:52479 72.125.64.41:443 tcp Allow internet only
And I'm not understanding why the "let out anything from firewall" rule is being triggered when I would have expected that to only trigger when the firewall was directly doing something for its own purpose. And even if it is being triggered by something somewhat expected (like the firewall sending the packet out on behalf of the VLAN), I doubt they would make the default that every VLAN's passing an inbound packet to generate a log message, so it makes me assume my setup must be flawed.
Thanks for any help.
I turned on logging for the rule that I thought was being triggered in the VLAN, and that shows that the PASS was via the "Allow internet only" rule I have in the VLAN, but then immediately after the WAN records the "let out anything from firewall".
Log entries:
WAN 2025-07-29T19:49:25-04:00 192.168.1.242:25430 72.125.64.41:443 tcp let out anything from firewall host itself (force gw)
MY_VLAN_10 2025-07-29T19:49:25-04:00 192.168.110.100:52479 72.125.64.41:443 tcp Allow internet only
And I'm not understanding why the "let out anything from firewall" rule is being triggered when I would have expected that to only trigger when the firewall was directly doing something for its own purpose. And even if it is being triggered by something somewhat expected (like the firewall sending the packet out on behalf of the VLAN), I doubt they would make the default that every VLAN's passing an inbound packet to generate a log message, so it makes me assume my setup must be flawed.
Thanks for any help.
