OPNsense 20.1.4 VM on KVM Not Allowing Inbound Connections aside from ICMP

[abalsam]

I am in the process of setting up a test lab using KVM (Ubuntu Server 20.04 running KVM and Cockpit).  I am able to install and update OPNsense without issues and the client behind OPNsense has full connectivity.  However, even after I permitted incoming non-routable IP address traffic and set the appropriate rules to permit inbound HTTPS and SSH, the traffic times out and I see no entries in the firewall logs.  However, when I try to connect from the same source to the same destination on HTTP (still blocked by rule),  the traffic also times out but I DO see entries in the firewall logs.  I should also note that incoming ICMP is permitted by rule and is working correctly.

To further test if the issue was related to KVM or OPNsense, I downloaded and installed PFsense (latest) in parallel on the KVM server.  Same base rules and I am able to successfully connect to the webgui and SSH through the WAN interface.

I am not sure where to look to troubleshoot this issue further.

Please let me know what you need from me (screen shots or logs).

Thanks

[abalsam]

Just 3 quick updates for you.

First I noticed that my firewall rules were not set to log on success.  I enabled logging and was able to confirm that the firewall was successfully passing the traffic but that it then timed out.

Second, I also tested against a fresh OPNSense 19.7 install and I was successfully able to connect without any issues.  I then applied the available patches making it a 19.7.10_1 system and it was still working properly.

Third, I installed a fresh version of 20.1 (before patching) and it worked.  I then applied the patch to 20.1.4 and it still worked.

This tells me that the issue I am encountering is very weird as I am so far unable to replicate it (maybe it is simply user error).

If anyone has any suggestions, please let me know (I will be keeping the VM).

Thanks