Upgraded to 26.7 - what should my rule status be?

[instantdreams]

I read the release notes, I reviewed the Migration Assistant, then I followed the steps. This included exporting my rules and adjusting **interface** to *lan* where it was *blank* and **ipprotocol** to *inet* when it was *inet46*. Everything appeared to work, and the Firewall | Migration Assistant has disappeared.

After this process I have the following status:

• Firewall | Rules | interface rules has my original rules
• Firewall | NAT | Source NAT | interface rules has my imported rules
• Removing the Firewall | Rules causes my local network to fail to resolve amything/li]
  

I had assumed that the firewall rules would be gone, replaced by the Source NAT rules. What am I missing?

[nero355]

What am I missing?

The fact that these two require !! 2 seperate migrations !! :
- Firewall Rules (Legacy) to Firewall Rules [new]
This [new] variant becomes Firewall Rules after the migration.
- Outbound NAT Rules to Source NAT Rules
This becomes just Source NAT Rules after the migration.

TL;DR : I think you misunderstood the whole thing ?!

[(MARLOO)]

What am I missing?

Source NAT rules do not replace firewall rules. If you remove the Firewall Rules, there are no policies left to permit traffic from the LAN,so DNS and connectivity stop working


@ nero355 — very clear explanation