Firewall ignores rules randomly

[senseivita]

I'm having issues with the firewall not obeying my ruleset. All the rules are the clone of the first one so either they should all work or they should all not work. Some do, some don't. These are port forwards, BTW.

I don't know what's wrong. In the live view I can see the connections are blocked by the default ruleset, meaning for some reason it's not matching them but, like I said, not all of them: I checked them several times finding nothing wrong with them.

Is this a bug? I also added a ZeroTier interface, the firewall pings the only client I have at the other end, and the client also pings the firewall but the firewall doesn't route  the subnets.

Is this a known bug?

[senseivita]

Solved it!
...well not really, I went back to pfSense. :/

[hbc]

Did you verify your logs? Was it _really_ block or just reported as blocked? I stopped taking live log as serious source of information. I do a tcpdump to verify whether it is really blocked or just reported.

I have many rules, I know ports are open and they are shown as blocked.

It is an pf-issue that is better handled in pfsense than opnsense

See here: https://forum.opnsense.org/index.php?topic=12459.msg58660#msg58660

[franco]

1. the problem report here is nowhere near the state to be able to get an insight in to what could be wrong in just under 3 hours.

2. giving a negative impression of OPNsense over an unfounded interpretation of a bug that cannot be confirmed due to lack of substantial information is misleading.


Cheers,
Franco