Firewall rules incorrectly applied v25.1

[littlegreenbean33]

Important notices

Before you add a new report, we ask you kindly to acknowledge the following:

• [ x] I have read the contributing guide lines at https://github.com/opnsense/core/blob/master/CONTRIBUTING.md
• [ x] I am convinced that my issue is new after having checked both open and closed issues at https://github.com/opnsense/core/issues?q=is%3Aissue

Please see discussion at

OPNsense Forum
► English Forums
► 25.1 Production Series
► [CLOSED]be aware newbie. Default deny /state violation rule

rule application and reporting seem to be wrong when installing pihole in proxmox with opnsense.

To Reproduce

install opensense 25.1 in proxmox as a virtual machine.
Create a bridge to the LAN ethernet interface.
a) install a barebone debian LXC container and run pihole installation scripts
b) install barebone debian LXC container, install docker and on top install pihole docker image
assign the newly created container the same bridge as opnsense
create a lxc container and nginx (i.e. turnkey nginx-php-fastcgi)

access web portal from a browser/PC connected physically to the same switch as proxmox server.

Expected behavior

I can access the web interface of pihole (I can't)
I can get to the landing page of turnkey installation (yes I can)
piohole traffic is logged (yes it is logged)
nginx traffic is logged (only partially ICMP/DHCP)

If I look at the firewall, log file, life view, my client/browser appear as source and not as destination when trying to reach pihole

in the attached image

• 192.168.33.17 is pihole container
• 192.168.33.1 opnsense VM
• 192.168.33.190 client/browser
• 192.168.33.228 nginx container

Describe alternatives you considered

A clear and concise description of any alternative solutions or workaround you considered.

Screenshots

If applicable, add screenshots to help explain your problem.
https://drive.proton.me/urls/2X352HV2G4#5RtpnXhvIj8G screenshot

Relevant log files

If applicable, information from log files supporting your claim.

https://drive.proton.me/urls/R9M3N13AGW#V7GWiN9xuH9M logs

Additional context

virtualisation with proxmox 8.3.4

Software version used and hardware type if relevant, e.g.:

Versions
OPNsense 25.1-amd64
FreeBSD 14.2-RELEASE
OpenSSL 3.0.15