tcp share_forward

[supabib]

Hello all,

Since OPNSense 17 or 18,  I have a bug (referenced here : https://opnsense.org/opnsense-17-1-1-released/). I need to issue the following command all the time to make sure that port forward keeps working :

Code Select Expand

sysctl net.pf.share_forward=0
I even added this command to a custom action that I have scheduled every minute.
Is there a definitive solution to this issue?

Thanks in advance,

[franco]

Hi there,

Explain the bug or unset Firewall: Settings: Advanced: Shared forwarding. :)

We haven't had a reported bug for shared forwarding in over a year now. Maybe it is setup-related or contrary to what you would expect (web proxy + captive portal + shaping combo).


Cheers,
Franco

[supabib]

Hello and thanks for your answer. You're right, I didn't explain my bug .... sorry for that. The issue is that the port forward doesn't work.

I tried what you proposed and it's working !! Thanks. What could be the consequences of disabling this ?

[franco]

Combinations of captive portal / traffic shapper with policy routing do not work. That's all, and that's the FreeBSD standard behaviour. ;)


Cheers,
Franco

[mimugmail]

Hello and thanks for your answer. You're right, I didn't explain my bug .... sorry for that. The issue is that the port forward doesn't work.

I tried what you proposed and it's working !! Thanks. What could be the consequences of disabling this ?

Can you exactly explain how to reproduce so I can work in this with franco?