Allowed source-port is being blocked (AdGuard Home)

[Koen Drai]

Hi,

I am running an AdGuard Home DNS server in my home network (on Debian 11, which is
v0.9.3).

Works fine so far, but I am getting the following error messages in syslog:
Mar  6 20:48:33 fook kernel: [160941.334608] "filter_IN_knet_REJECT: "IN=enp2s0
OUT= MAC=<MAC> SRC=5.9.164.112 DST=192.168.1.1 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=0
DF PROTO=TCP SPT=853 DPT=46170 WINDOW=0 RES=0x00 RST URGP=0

However, this request should not be rejected according to the configuration:

/etc/firewalld/zones/knet.xml
(...)
   <rule family="ipv4">
     <!-- 853 TCP AdGuard Home-->
     <source-port port="853" protocol="tcp"/>
     <accept/>
   </rule>
(...)


--list-all:
(...)
  rich rules:
(...)
         rule family="ipv4" source-port port="853"
protocol="tcp" accept
(...)


Similar behavior for source-port 443 TCP.


Am I missing something?
Is this a known error (and fixed in a later version?)?



Thanks for any hints,

  Koen