How does "Live View" work - all "block" events are not shown?

Started by TheLinuxGuy, November 19, 2018, 07:58:05 AM

Previous topic - Next topic
Hi!

New to opnsense and I am trying to figure out why under "Live View" under Firewall I am not seeing any block events.

I believe the firewall by default drops all packets without an explicit accept, is this why?

I am trying to troubleshoot a new host which sits on a VLAN under the firewall. I can see the traffic exiting the DMZ vlan but don't see where the block happens.

I am interested in seeing 'block' events because it helps me craft a specific firewall rule to allow the traffic.

is there a better way? is it possible to enable a more verbose 'debug' mode temporarily?

The log setting for default block is under System: Settings: Logging: Log Firewall Default Blocks.


Cheers,
Franco