• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Block alias in rule

Scheduled Pinned Locked Moved Firewalling
14 Posts 2 Posters 4.0k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • L
    lfph
    last edited by Sep 8, 2011, 7:27 AM

    Hello,
    can someone explain how to block an Alias in firewall rules?
    thanx.

    1 Reply Last reply Reply Quote 0
    • M
      Metu69salemi
      last edited by Sep 8, 2011, 9:20 AM

      create blocking rule with that alias.

      Seriously talking: what kind of alias you have?

      1 Reply Last reply Reply Quote 0
      • L
        lfph
        last edited by Sep 8, 2011, 10:02 AM

        HI, i kind of figure it out i think but it doesnt do the job!!
        trying to block the https from facebook and i did like on the pix attached but it doesnt work. any idea?
        thx.

        alias_facebook.jpg
        alias_facebook.jpg_thumb
        lan_reject_facebook.jpg
        lan_reject_facebook.jpg_thumb

        1 Reply Last reply Reply Quote 0
        • M
          Metu69salemi
          last edited by Sep 8, 2011, 10:25 AM

          couple things:
          your rule is blocking anything between 80-443
          in what interface this rule is added

          1 Reply Last reply Reply Quote 0
          • L
            lfph
            last edited by Sep 8, 2011, 11:41 AM

            i'm using pfsense to filter some of the computers of the school where i'm working at. This rule is added in "school proxy filter" (that i created) as i want only certain computers to be filtered.

            1 Reply Last reply Reply Quote 0
            • M
              Metu69salemi
              last edited by Sep 8, 2011, 11:47 AM

              yes but in what interface this rule is applied?

              1 Reply Last reply Reply Quote 0
              • L
                lfph
                last edited by Sep 8, 2011, 2:56 PM

                here's a screenshot. does it help?

                ![Screen shot 2011-09-08 at 4.55.49 PM.png](/public/imported_attachments/1/Screen shot 2011-09-08 at 4.55.49 PM.png)
                ![Screen shot 2011-09-08 at 4.55.49 PM.png_thumb](/public/imported_attachments/1/Screen shot 2011-09-08 at 4.55.49 PM.png_thumb)

                1 Reply Last reply Reply Quote 0
                • M
                  Metu69salemi
                  last edited by Sep 8, 2011, 6:00 PM

                  If the proxyinterface itself is the same as lan subnet, then it should work

                  1 Reply Last reply Reply Quote 0
                  • L
                    lfph
                    last edited by Sep 8, 2011, 6:33 PM

                    well, it doesnt. here's my interface setup scrennshot.

                    ![Billede 1.png_thumb](/public/imported_attachments/1/Billede 1.png_thumb)
                    ![Billede 1.png](/public/imported_attachments/1/Billede 1.png)

                    1 Reply Last reply Reply Quote 0
                    • M
                      Metu69salemi
                      last edited by Sep 8, 2011, 6:39 PM

                      rules work on ingress

                      So the rules must be implemented to that interface where you want it to work and must have same subnet as source

                      1 Reply Last reply Reply Quote 0
                      • L
                        lfph
                        last edited by Sep 8, 2011, 7:49 PM

                        I think I'm starting to get it. I (think) made the proper changes. cannot try it now, i'll be at work first tomorrow afternoon. check the pix, what do you think?
                        thx a lot.

                        ![Screen shot 2011-09-08 at 9.49.07 PM.png](/public/imported_attachments/1/Screen shot 2011-09-08 at 9.49.07 PM.png)
                        ![Screen shot 2011-09-08 at 9.49.07 PM.png_thumb](/public/imported_attachments/1/Screen shot 2011-09-08 at 9.49.07 PM.png_thumb)

                        1 Reply Last reply Reply Quote 0
                        • M
                          Metu69salemi
                          last edited by Sep 8, 2011, 8:04 PM

                          Looks ok, but you're still blocking everything between 80 and 443

                          1 Reply Last reply Reply Quote 0
                          • L
                            lfph
                            last edited by Sep 9, 2011, 9:25 AM

                            that's right, made the change, let see if it works. thx again.

                            1 Reply Last reply Reply Quote 0
                            • L
                              lfph
                              last edited by Sep 9, 2011, 11:48 AM

                              it does work now, thank you very much, i really appreciate.
                              s.

                              1 Reply Last reply Reply Quote 0
                              14 out of 14
                              • First post
                                14/14
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                This community forum collects and processes your personal information.
                                consent.not_received