OPNsense 26.7 blocks LAN traffic

[ricksense]

Hi everyone,

I upgraded to OPNsense 26.7, but the default LAN pass rule no longer seems to work—I can't even access the web GUI from the LAN subnet. I have to disable the firewall (pfctl -d) via the console just to reach it. Since this is just a lab setup, I reset the firewall entirely and recreated the rule from scratch, but the issue persists. I'm not sure what I'm missing—could you help me troubleshoot this?
Thanks

[nero355]

What happens when you Enable all the Anti-Lock Out Rules for webGUI and SSH access ?

Or are they already Enabled ?!

[ricksense]

What happens when you Enable all the Anti-Lock Out Rules for webGUI and SSH access ?

Or are they already Enabled ?!

Yes, already enabled. Anyway, I fixed the problem(s) eventually, but I had to struggle a lot.
Very strange behavior compared to the old version.
Thanks

[Patrick M. Hausen]

What exactly was your fix, please?

[ricksense]

What exactly was your fix, please?

Of course!

Here is an explanation of what I did to configure the firewall rules successfully. Frankly, it barely makes sense even to me, since I simply reapplied the exact configuration I had in the previous version. After setting and applying the LAN pass rule again, I used the following commands in the shell: pfctl -F state and pfctl -e

After that, even though my PC could access the OPNsense dashboard, it still couldn't reach the internet. I enabled gateway monitoring (monitoring IP: 8.8.8.8), and checking 'Use System Nameservers' in the Unbound settings (enabling DoT got the job done as well).