Automatic outbound NAT rule does not working

[ccesario]

Hi guys,

It seems that Automatic outbound NAT rule generation does not working as expected.
It works only when I define Manual outbound NAT rule generation and create my rules.

Tested with fresh installation OPNsense 18.7.7 and 18.7.7 versions.

Does someone are facing the same problem ??!

Regards
Carlos

[franco]

Hi Carlos,

Can you define "not working" a bit more for us?

And what does the automatic rule look like, and what is the manual rule?


Cheers,
Franco

[ccesario]

Hi Carlos,

Can you define "not working" a bit more for us?

And what does the automatic rule look like, and what is the manual rule?


Cheers,
Franco

Hi Franco,

Not working in my tests  mean that when I create a Lan to Wan rule, my hosts does not have internet access. And after investigate I could see that there is no "Automatic Outbond nat rule".  I think that is would be created (in older versions this work)

And after I create a manual Outbound nat rule, my hosts got internet access.


Expected result it is attached.
Current result is Blank.

[franco]

So you are saying automatic outbound rules aren't created for your LAN anymore since a version 18.7.x? Do you know which particular version for reference?


Cheers,
Franco

[ccesario]

Hi Franco,
Yes, the automatic outbound rules aren't created from LAN.

Well, I have tested it 18.7.6 and 18.7.7 .. and both does not work.

I have a 18.7.3 version that is working.

Best regards

[ccesario]

Hi @Franco,

It seems the problem happen after 18.7.5.
We have tested 18.7.6 and 18.7.7 and both have the same  behaivor. But with 18.7.5 no.

Best regards
Carlos

[putt1ck]

I can confirm this issue exists in 19.1.x; specifically if you follow the guidance on interfaces page regarding gateway selection for WAN, automatic outbound NAT rules are not created, but manual ones work; if you select the default (only) gateway automatic outbound NAT rules work as expected.

The firewall on which this was diagnosed worked in a n initial test bench situation; the only difference will have been WAN changed to manual from DHCP (and gateway added) and additional LAN/SSN network interfaces added (but not yet in use).

[franco]

We debugged this and changed a lot of code in the process:

https://github.com/opnsense/core/issues/2914

Can't rule out there is still an issue left, but would you mind going through the history and letting me know what differs in your case?


Cheers,
Franco

[flehmann]

I can confirm this issue exists in 19.1.4. I have updated a v18.7.10 today to v19.1.4 and have no outbound NAT automatic rules and must create it manually.

Thank you

[franco]

Please fix your setup according to https://github.com/opnsense/core/issues/2914#issuecomment-439904741