Firewall occasionally blocks packets from ovpns1

[pagefault]

Hi

I am trying to set up an OpenVPN server on my OPNsense. The client can connect to the server just fine and receives the route. However, I cannot access the LAN via OpenVPN. Under Firewall -> Rules -> OpenVPN I have two pass-all rules:

Code Select Expand


-> IPv4+6 * * * * * * *
<- IPv4+6 * * * * * * *

but I still see *some* packets from ovpns1 getting dropped by the "Default deny / state violation rule" of the firewall in the live view. This makes no sense to me, as this rule is last-match, but I have the pass-all rules as first match, so this should never happen imo.

Sometimes, packets from the VPN server to my LAN get dropped, e.g., 192.168.10.250:46092 -> 192.168.10.175:8006,
but sometimes they also get through. I cannot see a difference between these two packets, except for the random source port.

I'm running latest version 25.1.12. Reboot doesn't help.

Any help would be appreciated.

Cheers