Firewall working strange

Started by nutonas, October 11, 2018, 11:29:36 PM

Previous topic - Next topic
Hi, ammm the thing is, that my OPNSENSE does not allow any traffic from WAN side literally. I had created rules for example to allow ICMP ping from  WAN side:
Proto    Source    Port    Destination    Port    Gateway    
IPv4 ICMP    *    *    WAN address    *    *       

And when im trying to ping my opnsense from outside, getting "Request timed out", but in logs opnsense says that icmp passes:
filterlog:92,,,0,bge0,match,pass,in,4,0x0,,122,1206,0,none,1,icmp,60,MYPC_IP,OPNSENSE_WAN_IP,datalength=40

The same problem is for example with OpenVPN, when im trying to connect from my PC to VPN server
In firewall rulles im allowing OpenVPN:
Proto    Source    Port    Destination    Port    Gateway    Schedule    Description    
IPv4 UDP    *    *    WAN address    1194 (OpenVPN)    *       OpenVPN wizard

And in firewall logs says that OpenVPN passes:
   filterlog: 124,,,0,bge0,match,pass,in,4,0x0,,122,1198,0,none,17,udp,114,MYPC_IP,OPNSENSE_WAN_IP,51615,1194,94

And logs from OpenVPN:
Oct 12 00:23:09    openvpn[20663]: MYPC_IP:51615 TLS Error: TLS handshake failed
Oct 12 00:23:09    openvpn[20663]: MYPC_IP:51615 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Oct 12 00:22:39    openvpn[20663]: MYPC_IP:51615 write UDPv4: Permission denied (code=13)

My PC is from outside of my OPNSENSE wan...

So there is somewhere miss configuration? Can any someone help me?