Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    allow/block firewall rules and reboot

    Scheduled Pinned Locked Moved General pfSense Questions
    4 Posts 3 Posters 552 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      richardgraci
      last edited by

      Guys, i'm new to pfsense, please bare with me LOL
      so i just received a brand new netgate 4100 with sw version 22.05.
      setup public static ip and by default pings are blocked.
      i added a rule to allow ping for troubleshooting purposes - worked fine.
      then i wanted to "disable" the allow rule by clicking the green check mark, which then grays it out, that means ruled disabled.
      pings are still coming in...
      then decided to edit the allow rule and made it block pings and enabled it.
      pings are still coming in...
      while the block pings rule is active, decided to reboot pfsense.
      pings stop coming in, it appears block rule is working after reboot.
      is this expected or a bug ?

      Thanks!

      J 1 Reply Last reply Reply Quote 0
      • J
        Jarhead @richardgraci
        last edited by

        @richardgraci
        Don't forget it's a stateful firewall.
        If you ha a constant ping going, changing the rule will not effect the existing state created by the allow rule when it was active.
        You would have to either delete the state or wait for it to expire.

        1 Reply Last reply Reply Quote 1
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Yup, that. Disabling the rule does not remove the state so if you have a continuous ping running it will remain open. Or if you're testing from Windows it will match the open state even if you start new ping because it uses the same icmp id for all pings. Because...Windows. 😉

          Steve

          1 Reply Last reply Reply Quote 0
          • R
            richardgraci
            last edited by

            Thanks jarhead and stephen... i did have continuous ping LOL i guess i need to review my firewall fundementals "stateful"

            1 Reply Last reply Reply Quote 1
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.