opening WebIF and ssh does not work, hidden pf rules ?!?

Started by tja, May 25, 2020, 12:13:52 PM

Previous topic - Next topic
hi,


for lab usage i installed 20.1 as guest on a debian KVM host.

if i try to add a rule to open https/443 & ssh/22 on the WAN side i cannot connect either service regardless if i add the rule to the WAN rules or to floating.

block private networks is unchecked (the WAN side is in a 10.x.x.x net).
if i use logging on the rule i can see that it is used and passed/green.

if i manually disable pf via pfctl -d i can connect from the WAN side thou so the networking aspect seems to work fine.

i tried to start anew with a fresh install but the problem is there right at the start.


tia,tja...

Is the WAN a DHCP interface? Is the host you're trying to connect from in the WAN subnet? If yes and yes, try 'disable reply-to' in the firewall rules.
OPNsense virtual machine images
OPNsense aarch64 firmware repository

Commercial support & engineering available. PM for details (en / de).

Quote from: Maurice on May 25, 2020, 12:39:01 PM
Is the WAN a DHCP interface? Is the host you're trying to connect from in the WAN subnet? If yes and yes, try 'disable reply-to' in the firewall rules.
thx very much, that did it !