Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
24.7 Production Series
»
Firewall Live View no longer tags Outbound NAT as rdr since 24.7.6
« previous
next »
Print
Pages: [
1
]
Author
Topic: Firewall Live View no longer tags Outbound NAT as rdr since 24.7.6 (Read 1250 times)
MrBlack
Newbie
Posts: 3
Karma: 0
Firewall Live View no longer tags Outbound NAT as rdr since 24.7.6
«
on:
October 11, 2024, 04:09:28 am »
I did a quick upgrade to 24.7.6 in order to install some plugins. Upon looking at my Firewall Live View, I noticed a bunch of rule entries that were missing a description. After looking at the pattern of traffic I realized that they were the NAT redirection entries that were no longer highlighted gold, nor tagged as Automatic Outbound NAT traffic also breaking Action filters.
«
Last Edit: October 11, 2024, 05:19:07 am by MrBlack
»
Logged
MrBlack
Newbie
Posts: 3
Karma: 0
Re: Firewall Live View no longer tags Outbound NAT as rdr since 24.7.6
«
Reply #1 on:
October 11, 2024, 04:53:56 am »
I'm not sure if this is related to the recent commit for
pflog: pass the action to pflog directly
:
https://github.com/opnsense/src/commit/18af3384cc5f0f02266d67674e860509828bf44a
I'm going to try to downgrade my kernel to 24.7.5 and see if NAT rdr highlighting returns.
EDIT:
NAT traffic is still not tagged or highlighted gold after downgrading kernel to 24.7.5_4
«
Last Edit: October 11, 2024, 05:30:15 am by MrBlack
»
Logged
pacnwsoundstream
Newbie
Posts: 2
Karma: 0
Re: Firewall Live View no longer tags Outbound NAT as rdr since 24.7.6
«
Reply #2 on:
October 11, 2024, 08:43:32 am »
I updated my system this morning and can confirm this is happening on my end too.
Logged
franco
Administrator
Hero Member
Posts: 17619
Karma: 1605
Re: Firewall Live View no longer tags Outbound NAT as rdr since 24.7.6
«
Reply #3 on:
October 11, 2024, 08:53:33 am »
If NAT logging broke it was in 24.7 with FreeBSD 14.1. There are enough upstream changes that clearly degrade the behaviour of pflog.
The particular change in 24.7.6 just unbreaks two spots (one for IPv4 and one for IPv6), but the change is also not 100% correct in all cases.
I can assure you OpenBSD also has a lack of visibility / reliability in that area. We have had multiple fixes forwarded to both projects so far.
Cheers,
Franco
Logged
julsssark
Jr. Member
Posts: 93
Karma: 6
Re: Firewall Live View no longer tags Outbound NAT as rdr since 24.7.6
«
Reply #4 on:
October 12, 2024, 05:02:31 pm »
I think what is happening is that NAT redirects are no longer being tagged with an action of RDR. I see them in my logs but they have an action of Pass. I checked my logs and the last day I had an RDR action was on October 8, the day before 10.7.6 was released.
«
Last Edit: October 12, 2024, 05:05:03 pm by julsssark
»
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
24.7 Production Series
»
Firewall Live View no longer tags Outbound NAT as rdr since 24.7.6