1 Device blocked by default deny rule on Lan But not on WireGuard

Started by xXHelperXx, Today at 02:20:04 AM

Previous topic - Next topic
Hi People, maybe yo can help me on this.

Not sure when it started, but the NAS on the LAN is blocked from any device that trying to access it.
And while disconnected from the the LAN, and Connect to WireGuard VPN I'm able to access this NAS without issues.

Tried to search in the logs and found that the request was blocked by "Default Deny" Rule.
- I test it with WIFI/Cable on different port on the appliance.
- Tried to create brand new Pass all LAN Firewall rule
- There is Firewall rule on the bridge with Pass Rule for that LAN to Any for IPv4+6
- Tried to change the Firewall Optimization from Normal to Conservative
- Change the Firewall NAT Outbound: to Hybrid and Automatic 
- Disabled the crowdsec (No related but no impact)

Things that worth to mention:
- There is Firewall Normalization that set for the WireGuard connection.(Explain why the VPN can access?!)
- I recently moved from ISC DHCP to Dnsmasqm the issue was before the move.
- This spesifc NAS have 2 ports connect to LAN (NO LAGG, One with Static IP from the Opnsense + DHCP on the NIC and the second Static IP from the NAS OS.

I'm not really sure what is the problem.
Any kind of help will be pleased.
Thanks!

Screenshot from the Firewall log: https://imgur.com/a/wqLk3DO