Strange issue with Firewall

Started by bigops, July 13, 2026, 07:20:08 AM

Previous topic - Next topic
I have been trying to troubleshoot a rather strange issue with the firewall.  It seems that with the similar configuration some rules work but other do not
You cannot view this attachment.

The rules in Green highlighted seems to work fine but the one in orange does not

I performed a packet capture on the interface and it seems that there are packet RTX and connection finally times out.  ICMP and UDP packets are seen correctly.  I am also able access the internet with out any issue
You cannot view this attachment.

But the traffic is not logged against the firewall or does not seem to be present in any other interfaces since pcap on all of them turned out to be blank for 443 traffic

Any suggestions on how to resolve this

Thanks

BG

Quote from: bigops on July 13, 2026, 07:20:08 AMBut the traffic is not logged against the firewall or does not seem to be present in any other interfaces since pcap on all of them turned out to be blank for 443 traffic

Check rules on other interfaces where the traffic from the 10.100.100.64/?? network comes in to OPNsense, then modify, or if missing, add applicable rules.

Have you read this document?


If the 10.100.100.64/?? subnet is on <obscured>_Lab_Network interface, check your logs to see if the rule is hit. If so, check your outbound rules on the interface which goes to 172.17.12.155.

You could have a floating rule which may be blocking the connection or even a 'Destination Nat' (RDR) rule which is directing it elsewhere.