Firewall rules and physical ports

[DrJase]

Hi. Can individual rules be applied to individual network ports on a pfsense, or are they only applied globally?

I want to be able to have one network (physically connected to one network port) to be fairly unrestricted, but have another network (physically connected to another network port) to be with higher restrictions - web content filtering etc.

Is this achievable?

[johnpoz]

@DrJase yeah.. kind of the whole point of a firewall to be honest.

[stephenw10]

Yup, rules are applied per interface. Interfaces can be (are usually) a single port.

Exceptions to that would be, for example, VLANs where one port can carry multiple interfaces or bridges where one interface can span several ports.

Steve