Project

General

Profile

Actions

Bug #10246

closed

NAT: Syntax error when "Automatic create outbound NAT rules that direct traffic back out to the same subnet it originated from" is enabled

Added by James L about 4 years ago. Updated about 4 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Rules / NAT
Target version:
Start date:
02/09/2020
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.4.4-p3
Affected Architecture:

Description

I have the following port forward NAT rule to redirect DNS from LAN clients to a pi-hole:

Interface: LAN
Protocol: UDP
Source Address: <LAN_Clients> (alias)
Source Ports: *
Dest. Address: ! <DNS> (alias)
Dest Ports: 53 (DNS)
NAT IP: 192.168.1.250
NAT Ports: 53 (DNS)

When I enable "Automatic create outbound NAT rules that direct traffic back out to the same subnet it originated from" I get the following message in the GUI:

There were error(s) loading the rules: /tmp/rules.debug:81: syntax error - The line in question reads [81]: no nat on igb1 proto udp from (igb1) to 192.168.1.250 port port
@ 2020-02-10 09:30:25

Here's an extract from /tmp/rules.debug line 79-82:

# NAT Inbound Redirects
rdr on igb1 proto udp from $LAN_Clients to ! $DNS port 53 -> 192.168.1.250
no nat on igb1 proto udp from (igb1) to 192.168.1.250 port port
nat on igb1 proto udp from 192.168.1.0/24 to 192.168.1.250 port port -> 192.168.1.1 port 1024:65535

It looks like its adding the word port, instead of the actual port? e.g. port 53

Happens in 2.4.4-p3 and the latest 2.4.5-RC snapshot as well


Files

pfsense4.png (18.3 KB) pfsense4.png Error message James L, 02/09/2020 02:37 PM
pfsense5.png (99.2 KB) pfsense5.png NAT rule James L, 02/09/2020 02:37 PM
Actions

Also available in: Atom PDF