how to edit Default deny / state violation rule?

Started by milad, March 15, 2024, 08:07:12 PM

Previous topic - Next topic
March 15, 2024, 08:07:12 PM Last Edit: March 15, 2024, 08:11:01 PM by milad
hi my friends
In my firewall live view
Some of my authorized IPs are blocked
How can I unblock؟
https://s8.uupload.ir/files/screenshot_1402-12-25_at_22.33.29_ijb7.png

Does everything work? Then it is most likely out of state packets you do not need to worry about.
See also https://forum.opnsense.org/index.php?topic=36850.0
i am not an expert... just trying to help...


Since source and destination are different subnets, you need rules to allow such traffic. Have you?
What interfaces are configured and how are those subnets from screenshot related to them?
i am not an expert... just trying to help...

Quote from: tiermutter on March 15, 2024, 10:13:42 PM
Since source and destination are different subnets, you need rules to allow such traffic. Have you?
What interfaces are configured and how are those subnets from screenshot related to them?
I have just one interface Lan. 
opnsense 192.168.10.78    GATAWAY: 192.168.10.1(ip my router)

and web service 192.168.10.83   GATEWAY :192.168.10.78

my zabbix server 192.134.144.2 , opnsense access to zabbix server but web service not access

Sorry. My English is not good :)  thanks my friend to help me

Quote from: milad on March 15, 2024, 11:17:35 PM
Quote from: tiermutter on March 15, 2024, 10:13:42 PM
Since source and destination are different subnets, you need rules to allow such traffic. Have you?
What interfaces are configured and how are those subnets from screenshot related to them?
I have just one interface Lan. 
opnsense 192.168.10.78    GATAWAY: 192.168.10.1(my ip router)

and web service 192.168.10.83   GATEWAY :192.168.10.78

my zabbix server 192.134.144.2 , opnsense access to zabbix server but web service not access

Sorry. My English is not good :)  thanks my friend to help me

The IP of your zabbix is not a private address (and out of your LAN subnet) you must not use. Change it to an address in your subnet, eg 192.168.10.2
i am not an expert... just trying to help...