Well. The segmentation is to avoid security holes from Rogue third party devices. If you can access my pc vlan that only exists on my wired pcconnection, then you have indeed broken in to my domain. Letting the things that doesn’t give a shit about security have their own network is just sanity/sanitary.

Like I said, comprehension goes both ways.

You still haven’t answered the question, so clearly you don’t see the perspective.

Comprehension goes both ways

It’s like you’re not reading what i’m saying on purpose.

So perpetual liability regardless of what we do? Is that the advice you give? Saying “talk to them” is as vague a response as the advice listed from the first comment i responded to.

What a non-answer. I have a colleague with adhd that lost a customer because he couldn’t finish a job in time. Quite literally my business.

How do i help so it doesn’t happen again? From all i hear its a treatable issue.

Then give examples of what is valid.

Otherwise both problems persist. Misunderstanding by normals and undiagnosed ADHD-affected missing a tool.

I have no idea how to deal with someone that has adhd. I just know that they can’t process time the same way other people can.

I think the packets take one way in, and get routed a different way out.

It looks incredibly convoluted. My best guess is that traffic hits 172.168.1.254 and gets routed out on the internet and doesn’t pass the dmz.

Then i assume there is something wrong in the routes from your lan when returning traffic that got initiated through the internet opnsense. If you can see traffic hit the LAN network, all should be well on the way in.

Perhaps some sessions on the way time out due to low TTL. I’ve experienced drops of traffic when there are too many hops.

Its possible, depending on how you’ve setup your NAT, that the traffic cant return due to coming from a public ip.

Why do you have public ip-span configured as LAN?