Floating Rules and WAN Interfaces

Started by mooh, August 12, 2025, 12:24:44 PM

Previous topic - Next topic
I just realised that floating rules are not always applied to WAN interfaces. Running 25.4.2 on 2 DEC750 systems, one has a PPPoE with VLAN WAN interface, the other has a physical ethernet interface as WAN. The floating rules are not applied to the PPPoE WAN. I haven't found any documentation on that. What should be the right behaviour?

Floating rules are applied to PPPoE WAN here on my systems. Show your rules for further assistance.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

Here are the screenshots. The floating rules don't even show up on the WANoE rule set.

Looking at the floating rules a bit closer, there's a counter "6" saying how many interfaces these rules apply to and hovering above the number even shows them by name. This FW has 11 interfaces, one of them disabled. The others are physical, VLANs and PPPoE, V4 only and dual stack, DHCP and static,... I don't see a pattern.

So, my question I guess is what causes floating rules not to be applied? I can't find anything in the docs

To which interfaces did you assign that floating rule?

Regards,
S.
Networking is love. You may hate it, but in the end, you always come back to it.

OPNSense HW
APU2D2 - deceased
N5105 - i226-V | Patriot 2x8G 3200 DDR4 | L 790 512G - VM HA(SOON)
N100   - i226-V | Crucial 16G  4800 DDR5 | S 980 500G - PROD

That's my question: The way I understand it, floating rules should apply to all interfaces implicitly. Is that not the case?

By default yes, but you can choose as well to which to apply it explicitely.

Open that Floating rule and check to which interfaces is it applied.

Regards,
S.
Networking is love. You may hate it, but in the end, you always come back to it.

OPNSense HW
APU2D2 - deceased
N5105 - i226-V | Patriot 2x8G 3200 DDR4 | L 790 512G - VM HA(SOON)
N100   - i226-V | Crucial 16G  4800 DDR5 | S 980 500G - PROD

Quote from: mooh on August 13, 2025, 11:22:47 AMThat's my question: The way I understand it, floating rules should apply to all interfaces implicitly. Is that not the case?

By default yes - but this can be changed:

Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

Thanks a lot, guys! The floating rules only appear in the interface rules if there is at least one match. I expected to see an empty floating rules section when there are no matches.