pfSense is a free and open source firewall and router that also features unified threat management, load balancing, multi WAN, and more

pfSense is a free and open source firewall and router that also features unified threat management, load balancing, multi WAN, and more

pfSense is a free and open source firewall and router that also features unified threat management, load balancing, multi WAN, and more

When Require Firewall Interface is set in General setup the following error is logged when opening the firewall rules page:

pfSense is a free and open source firewall and router that also features unified threat management, load balancing, multi WAN, and more

pfSense is a free and open source firewall and router that also features unified threat management, load balancing, multi WAN, and more

Dec 5 09:36:29 snort 58498 Added firewall interface igb0 IPv6 address fe80::20e:c4ff:fed1:6f27 to automatic interface IP Pass List. Dec 5 09:36:29 snort 58498 Populating the internal list of firewall interface IP addresses for auto-whitelisting. ... Dec 5 09:36:29 snort 58498 Initializing 'alert_pf' custom output module for Legacy Mode Blocking ...

You can set MSS clamping in the GUI at System > Advanced > Firewall & NAT under the VPN Packet Processing. https://docs.netgate.com/pfsense/en/latest/config/advanced-firewall-nat.html#mss-clamping. This should overcome the issues you are having without the need to set custom options.

By specifying a firewall rule with an address or network starting with two colons :: it gets expanded to the same address/network with the interface's IPv6 prefix (at least I just checked that on an interface with "Track Interface" in pfSense+ 23.09.1 by inspecting the rules in /tmp/rules.debug ).

pfSense is a free and open source firewall and router that also features unified threat management, load balancing, multi WAN, and more