Code:
State Table Total Rate
current entries 269
You only have 269 entries in the state table, while there is space for 10,000, so that cannot be the problem.
If you a dynamic IP address, one that changes, you will have to use "(" and ")" around the external interface specification.
From my example above:
Code:
# --- EXTERNAL interface
# --- OUT
pass out quick on ($ext_if) all keep state flags S/SA
Note the
($ext_if) instead of the
$ext.