Pfsense Policy Routing and asymmetric routing

Networking & Firewalls
1

I was following this video last night, and it was simple enough to implement:
httpX://www.youtube.com/watch?v=ulRgecz0UsQ

(forum rules don’t let me post multiple links ATM, swap that x to an s)

However I did notice a bunch of:

@5 block drop out log inet all label "Default deny rule IPv4" ridentifier 1000000104

Doing a little more digging this seems to be the result of asymmetric traffic. Curious how others go about dealing with this as it does seem to cause occasional irregularities with some applications.

2

I use the automatic fix noted in the pfSense documentation you posted a link to

3

Thanks for confirming that, Louie1961. I’m jumping in here as I’ve been running into similar block log entries after setting up policy routing. Just to clarify, when you mention the automatic fix in the pfSense docs—are you referring to enabling “Bypass firewall rules for traffic on the same interface” under System > Advanced > Firewall & NAT? Or is there another method you found more effective?

Curious how others have handled this too, especially in setups with multiple WANs or VPN gateways.

4

Yea, I read that section, but still not entirely clear of what the implications of that change in policy really are.