Traffic blocked by "Default deny / state violation rule"

[dsduarte]

Hi guys...

I found some traffic been blocked on my OPNSense Firewall but I'm not sure why...
On the attached picture there is an example...
There is a LAN IP trying to reach an IP on the Internet and also there is traffic between IP's on the same subnet..
There is no rule on LAN or WAN to reject this traffic so I think by the label its due to some "state violation rule".
Can you help me to find out why these traffic is been blocked?


Thanks!

[zan]

Most likely out-of-state packets.
Check the blocked packets "tcpflags", if they are RA, FA, PA etc you can safely ignore those.

[dsduarte]

I have found PA and FA.... Tks!!!

Now I need to research what that means!