Problem cutting off anydesk and telegram access
-
@johnpoz said in Problem cutting off anydesk and telegram access:
olmanız gerekir.
Bunu zamanlanmış bir erişim yoluyla mı yapıyorsunuz - öyleyse "Çeşitli sekmesindeki Sistem > Gelişmiş altında Zamanlama sona erdiğinde bağlantıları öldürmeI'm doing it with the timing rule. I have system>advanced>miscellaneous>Schedule States unchecked.
Do you need to mark? -
@enesas
No, that option should be unchecked. But anyway, it doesn't have any affect on block rules. A block rule has no states to kill.
So you have to turn your schedule rule into a pass rule. -
@viragomann I didn't understand how to convert it to a transition rule.
how do you do that? -
@enesas
Simply select pass at action and invert the schedule time.
If you have multiple rules put it to the top of the rule set followed by a block rule (non´t scheduled) for the respective devices. -
@viragomann
I UNDERSTAND. THANK YOU VERY MUCH. I WILL TRY.but it's weird why pfsense can't get the current shape.
-
@enesas said in Problem cutting off anydesk and telegram access:
pfsense can't get the current shape.
shape? If you mean states they are listed under diagnostic states..
-
@johnpoz No. why can't it make the time based block rule I created above? I meant it.
thank you -
@enesas again look at the states.. If there is a state then a block rule will not work. Also doing a scheduled block rule on floating problematic if you have a any allow rule on the interface.
If want help would be helpful for anyone wanting to help you what is currently on your lan, what is currently on your wan - all rules. Rules are evaluated in order, for all we know that rule blocking is below a rule that allows. Lost track of how many times have seen - hey why does my block rule not work, and its setting below the any any rule..
Once a rule is triggered other rules are not evaluated.
-
@enesas Dear Friend as per your stated rule any desk and telegram uses ipv6 for using make sure you uncheck ipv6 traffic on advanced option in pfsense not to allow ipv6 in your network or simply use both ipv4 and ipv6 then check your states.
-
@ahsunh
Allow IPv6 is not checked.
But putting the default block rule suggested above and then the allow rule worked.
thanks
