Hello,
I make an rule to block incoming connection from internet to LAN with port 7014 then i check the traffic is not blocked.
Then i test make rule to accept this condition and found the counter not capture.
If you see on the picture there are incoming connection (torch) but the counter on the firewall always 0. Already try change chain from input to forward with no lucky, anyone know why?
Order of rules is quite important.
They go (within their chain) from top to bottom.
If you have a drop rule in forward and only further on an accept in the same chain (given same other parameters), that last rule is never going to be used.
If you want to have someone check your issue, it might be better to export the ip firewall filter part of your config so we can see what might be wrong.
The rule as shown is in the Input chain. Needs to be in the Forward chain.
Why? Probably because there is a problem in the configuration. Is the last rule of your Input chain “Input drop=all”? And the last rule of the forward chain? Forward drop=all?