Action - Pass, Block, Reject - no "Match" - 26.7.4_1

[devl_ish]

Hi all - I'm following https://docs.opnsense.org/manual/how-tos/wireguard-s2s.html and stuck on Step 4b.

This calls for a Match rule for fragmentation prevention, but under the [Action] dropdown I only have the usual Pass, Block and Reject, even when showing advanced options. I've probably overlooked something stupid, what would hide the "Match" option?

Have just done an upgrade chain from 25.7 all the way to most current as of today, 26.7.4_1.

[franco]

The documentation was updated too early on that subject, maybe we should revert it for now.  Sorry about that.


Cheers,
Franco

[devl_ish]

Thanks, are you able to provide a lead (few sentences) on how to accomplish it in the interim, while formal docs are being updated?

[Wrigleys]

Hi devl_ish

I assume you can use "pass" instead of "match" like documented under Rule normalization:

Select the Match action to apply normalization without deciding whether traffic is passed or blocked. A Pass rule can apply the same options while also allowing traffic. Match rules follow the normal firewall rule ordering; they are usually not quick so evaluation can continue after their options have been applied.

Stay safe,
Wrigleys

[Monviech (Cedrik)]

No, the documentation is too new. It doesnt exist yet. But we fix that soon. So long you can look at the direct branch here:

https://github.com/opnsense/docs/blob/master/source/manual/how-tos/wireguard-client.rst