1
General Discussion / Answer Packet is not passing PF but session counter increases
« on: January 27, 2020, 12:16:47 am »
I try to ping host 192.168.2.21 from 81.169.177.200
I see the echo-request (234) with tcpdump on the inboud interface. I see the request and response on the outbound interface.
The session table shows the same. The inbound session shows 234 packets in and out, but the out session shows twice as packets for the out counter.
How can I find out why the echo-response is dropped?
I see the echo-request (234) with tcpdump on the inboud interface. I see the request and response on the outbound interface.
The session table shows the same. The inbound session shows 234 packets in and out, but the out session shows twice as packets for the out counter.
Code: [Select]
all icmp 192.168.2.21:3290 <- 81.169.177.200:3290 0:0
age 00:03:54, expires in 00:00:09, 234:468 pkts, 19656:39312 bytes, rule 507
id: 030000005e2df8c8 creatorid: 8368a371
all icmp 81.169.177.200:3290 -> 192.168.2.21:3290 0:0
age 00:03:54, expires in 00:00:09, 234:234 pkts, 19656:19656 bytes, rule 127
id: 030000005e2df8c9 creatorid: 8368a371
How can I find out why the echo-response is dropped?
Code: [Select]
@127 pass out log all flags S/SA keep state allow-opts label "fae559338f65e11c53669fc3642c93c2"
[ Evaluations: 2132 Packets: 4173 Bytes: 1021132 States: 80 ]
[ Inserted: uid 0 pid 82969 State Creations: 776 ]
@507 pass in log quick on wg0 reply-to (wg0 192.168.70.1) inet proto icmp from <schmu_srv03:4> to <wupp_schapp:3> keep state label "501718afceb1c0ed891df29dd33b09bf"
[ Evaluations: 67 Packets: 0 Bytes: 0 States: 0 ]
[ Inserted: uid 0 pid 82969 State Creations: 0 ]