Firewall Live view

[locus]

Hi,
I see a block action on my WAN interface in the firewall live view without a label which I didn't setup myself.
I don't have any rules in the firewall to block on the WAN interface, just the default.

Firewall settings are setup to only log packets blocked by Bogons and Private Networks.

So my confusion is: where does this block come from?

[pfry]

You lopped off the info button in your image (on the far right, normally)(and the opposite port). Is it present? What does it indicate? The popup also offers a rule link which may (or may not) be useful.

[nero355]

So my confusion is: where does this block come from?

Default Block Rule because it's traffic none of your Clients need/generated ?!

[locus]

@pfry
The detailed rule info does not give anymore info. See screenshot

@nero355
Maybe, but how if I disabled the logging of matched default block rules?

[pfry]

[...]The detailed rule info does not give anymore info.[...]

"Reason: ip-option". You may not even be hitting a rule. Also, is pppoe0 your "WAN"?

[franco]

pf has 3 spots dropping packets due to "PFRES_IPOPTIONS" and all of them have a "misc" debug message if you want to investigate. The IPv6 routing header seems to be a good offender ;)