I am using the default setting to block all traffic as default. I have ports open to allow appropriate traffic through.
I have some application that is trying to get through on a blocked port but I am having trouble figuring out which one.
Does the firewall log blocked traffic somewhere that I can use to see what is happening?
On your firewall rule, there is a check box for ‘Event Logging.’ Go ahead and enable this and save and apply changes. From there go to the ‘Status’, ‘Event Log’ tab. If you are by default blocking all traffic, you’ll have a lot to sift through here but you’ll see exactly what the firewall is blocking and this should let you narrow down what application is causing the issues.