Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    {Complete} Timebased Rules

    Scheduled Pinned Locked Moved Completed Bounties
    187 Posts 10 Posters 146.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      heiko
      last edited by

      Hello,
      sorry for the misunderstandings about the fw states. I have tested it with two schedules, because (scotts posting) the first schedules becomes up only after a reboot.

      1.) I created two schedules
      2.) I created one rule to permit icmp to WAN with one schedule (activ 12:45 to  13:00)
      3.) At 12:45, sorry nothing happens, no ping replys, at 12:51 i edited and saved manually the schedule for a second time, and it rock´s , hm
      4.) The same behaviour if i edited and saved the icmp rule a second time.
      5.) At 13:00 nothing happens, at 13:10 i edited and saved the schedule a second time manually, the ping is killed directly

      This is not a April Fool's joke!

      I think it will work, but only when i edit and save a schedule or the special schedule-rule for a second time! I suppose so.

      Can you duplicate this? I´m blessed if i know.

      In german:

      Hallo,
      entschuldigung für die Missverständnisse bzgl. der firewall states. Ich habe es mit 2 schedules getestet (scotts posting), weil der erste Zeitplan nur nach einem Neustart aktiv wird.

      1.) Ich habe zwei Zeitpläne erstellt
      2.) Ich habe eine Regel mit einem Zeitplan (aktiv 12:45 bis 13:00) erstellt, die ICMP Traffic zum WAN Interface erlaubt.
      3.) Um 12:45, entschuldigung, nichts passiert. Keine Ping Antwort, um 12:51 habe ich manuell den zeitplan ein zweites mal gespeichert, und es läuft..
      4.) Das gleiche Verhalten war beim zweitenmal abspeichern der ICMP Regel
      5.) Um 13:00, nichts passiert, um 13:10 habe ich den Zeitplan ein zweites Mal manuell abgespeichert. Der Ping ist sofort gekillt.

      Das ist kein Aprilscherz

      Ich denke es wird funktionieren, aber nur wenn ich ein zweites Mal den Zeitplan oder die entsprechende Zeitplan-Regel editiere und speichere. Ich vermute es!

      Könnt Ihr das nachstellen?Ich weiß es wirklich nicht.

      1 Reply Last reply Reply Quote 0
      • S
        sullrich
        last edited by

        Please try creating schedules at least 30 minutes apart.  If these work then I have a hunch of what is going on.

        1 Reply Last reply Reply Quote 0
        • H
          heiko
          last edited by

          i will test it

          1 Reply Last reply Reply Quote 0
          • H
            heiko
            last edited by

            It is not working.

            The Test:

            • first i created 2 schedules with 30 min. apart –> Screenshot

            • i created a blocking rule to block icmp traffic to www.heise.de without a schedule. I saved it and it works, no ping replys, i disabled the rule and reset the states, the ping reply and all was good....!

            • Then i edited this blocking rule and choose a schedule - the activate time were not reached -, so the ping should be answered, but nothing happens. Here i waited for 20 minutes, but alsio nothing happens.

            • I edited and saved the schedule and rule a second time, but also nothing happens...

            • The Test Box is a real box not a virtual machine

            I capitulate, in my opinion, anywhere is a "bug".
            Please duplicate.
            Greetings
            Heiko

            blocking_icmp_rule.jpg
            blocking_icmp_rule.jpg_thumb
            2_ranges_with_30min_apart.jpg
            2_ranges_with_30min_apart.jpg_thumb

            1 Reply Last reply Reply Quote 0
            • H
              heiko
              last edited by

              Morning i am in irc with hoba again.
              greetings heiko

              Then i post it back or hoba

              1 Reply Last reply Reply Quote 0
              • H
                heiko
                last edited by

                Sdale: thanks for the really pretty gui. It looks now fine

                1 Reply Last reply Reply Quote 0
                • S
                  sullrich
                  last edited by

                  Please test a new snapshot about 2 hours from now.

                  Thanks to Hoba for translating.

                  1 Reply Last reply Reply Quote 0
                  • H
                    heiko
                    last edited by

                    i´m tired ;D

                    i will test it in a few hours, i´m taking with hoba tonight in irc…..

                    1 Reply Last reply Reply Quote 0
                    • H
                      heiko
                      last edited by

                      Hello sdale,
                      look at the screenshot. I think a "missing text" is in the notification…

                      I don´t know. Can you duplicate this behaiour?

                      1.) I have a schedule on the rule.
                      2.) If i edit and save the rule and change the schedule to "none"
                      3.) I´m going immediate to the schedules, delete the schedule.
                      4.) The schedule is away. OK, but the notifaction above comes up...

                      Thanks

                      in_use_by_what.jpg
                      in_use_by_what.jpg_thumb

                      1 Reply Last reply Reply Quote 0
                      • H
                        heiko
                        last edited by

                        Hello Scott,
                        sorry, sorry, sorry, it runs not for me. I think, we need tonnight another IRC-session and a dry wine. ;) The behaviour is same as yesterday. Before the test, i updated to the newest snapshot.

                        1 Reply Last reply Reply Quote 0
                        • Y
                          yoda715
                          last edited by

                          @heiko:

                          Hello sdale,
                          look at the screenshot. I think a "missing text" is in the notification…

                          I don´t know. Can you duplicate this behaiour?

                          1.) I have a schedule on the rule.
                          2.) If i edit and save the rule and change the schedule to "none"
                          3.) I´m going immediate to the schedules, delete the schedule.
                          4.) The schedule is away. OK, but the notifaction above comes up...

                          Thanks

                          Put a description in the firewall rule and it should show.

                          1 Reply Last reply Reply Quote 0
                          • H
                            heiko
                            last edited by

                            Ah yes, superb

                            1 Reply Last reply Reply Quote 0
                            • H
                              heiko
                              last edited by

                              OK, that runs, the rule description says (not parsed). Would it be better with "parsed for schedules" ?

                              1 Reply Last reply Reply Quote 0
                              • S
                                sullrich
                                last edited by

                                The description is for the firewall operator only.  Nowhere do we use that data besides displaying it for the firewall operator.

                                1 Reply Last reply Reply Quote 0
                                • H
                                  heiko
                                  last edited by

                                  Thanks scott

                                  1 Reply Last reply Reply Quote 0
                                  • H
                                    heiko
                                    last edited by

                                    Hello guys,
                                    a cracking good story :D. At first, thanks for all. I made a "short" test at the morning, and the blocking rule roooooooccccccksssss…. :D :D :D :D :D :D :D :D :D

                                    Today-Tonight, i will a make a complete test. I think, i meets HOBA tonight in irc and we can discuss the outcomes.

                                    Thanks, Thanks all of the pfsense Coding and Testingteam!!!

                                    Heiko

                                    1 Reply Last reply Reply Quote 0
                                    • H
                                      heiko
                                      last edited by

                                      Hello Scott,
                                      now i am testing, we have a few problems with multiple rules in the rulebase, i think. When i meets HOBA in IRC we discuss the problem….
                                      Greetings
                                      heiko

                                      1 Reply Last reply Reply Quote 0
                                      • H
                                        heiko
                                        last edited by

                                        Hello Scott´s, Hello hoba (have fun with the goodie!)
                                        Yesterday the test with multiple rules in the rulebase was successful. I´m very happy about this, but to be on the safe side, i needed a final test tonight, so if this succeeds, we can knock it out…..:D
                                        Greetings
                                        heiko

                                        1 Reply Last reply Reply Quote 0
                                        • H
                                          heiko
                                          last edited by

                                          Hello,
                                          many many thanks.

                                          Now, it it finished. My final test was successful, we can knock it out….

                                          Great Job, Scott, Scott and Hoba and all the other people from the pfsense team

                                          I think, it is a killer feature for the business. In a few days a write a tutorial with wink,

                                          Thanks a lot
                                          Heiko

                                          -->Scott, now we can arrange the portknocking feature :).

                                          1 Reply Last reply Reply Quote 0
                                          • S
                                            sullrich
                                            last edited by

                                            Yay!  Sounds good.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.