New firewall rule doesnt take effect until I manually reset states
-
Hi there,
We had a bruteforce sip attack happen here that fail2ban resolved OK on the Port forwarded Box.
However I wanted to stop it at the PFSense Box therefore clicked the Easy Rule to block. However this did not take effect after applying the rule and seeing the filter update.
it was only after I manually reset the states on the PF sense box did the rules apply and I could see traffic to our voip server being blocked at the PFsense Box.
Is this normal behaviour ? I would have expected to take effect when I saved the rule and the filter was applied.
I am on version 2.0-RC Built On: Fri May 20 16:52:10 EDT 2011
cheers
-
Yes this is normal and to be expected.
The rules are checked when a state is created.Since in your case the states were already established, your new rule did only affect new connections and not the already existing connections.
-
Thank you very much GruensFroeschli
I will remember this in the future when creating rules.
Many Thanks
