New Source NAT page

[Ted]

Greetings,
I have an OPNsense box running 26.7.2_2-amd64. The WAN interface has a static /29 subnet. Some IPs are used for specific servers. In previous versions of OPNsense, I used Outbound NAT to direct internal servers to a specific external address.

When I upgraded to 26.7, I decided to migrate the Outbound NAT rules using the steps outlined under the Migration assistant. I downloaded the Outbound rules, looked over the CSV file, and then uploaded the CSV file. I tested from an external network, and everything appeared to be working. I went to look at the new Source NAT page, and the page claimed to be "showing 1 to 4 of 4 entries", which sounded right. However, no entries were actually displayed.

I decided that it should not cause a problem if I manually added the rules. (If it did, I could always delete them). Again, I tested the servers from an external network, and everything appeared to be working. I went back to look at the new Source NAT page, and the page claimed to be "showing 1 to 8 of 8 entries", which sounded like I had managed to double up on my rules. However, this time, 4 entries were displayed (most likely the ones I added manually).

This doesn't seem to be causing a functional problem, and I'm inclined to leave it alone lest I break something. Do I really have eight rules? If necessary I can SSH in and edit a config file. Is the wrong count displayed? In that case I can learn to ignore it.

Grateful for any suggestions on this.
Thanks,
Ted

[Monviech (Cedrik)]

Can you share what you have configured in /conf/config.xml (your config backup) for these Source NAT rules?

Also what is your NAT mode?

[drosophila]

I downloaded the Outbound rules, looked over the CSV file, and then uploaded the CSV file.

Did you then follow that up with removal of the legacy rules? If not, this would be where the excess rule count comes from.