Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Assistance with Schedule States in System: Advanced: Miscellaneous: Schedules

    Scheduled Pinned Locked Moved General pfSense Questions
    4 Posts 2 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      MindfulCoyote
      last edited by

      Hi everyone,

      I am looking for some advice with scheduling rules. Specifically, I cannot get the "Schedule States" configuration setting to work. (Schedule States in System: Advanced: Miscellaneous: Schedules on 2.1.4-RELEASE (i386)

      It's possible that I am simply experiencing Bug #3558? https://redmine.pfsense.org/issues/3558

      I've tried numerous tests, including the example provided in the book, but no matter what configuration I use, existing states do not get cleared (although new connections are prevented.)

      Here are my settings:

      schedule_states.png
      schedule_states.png_thumb
      9pm.png
      9pm.png_thumb
      misc.png
      misc.png_thumb

      Err

      –
      Erreu Gedmon

      Firewalls are hard...
      but the book makes it easier: https://portal.pfsense.org/book/

      1 Reply Last reply Reply Quote 0
      • M
        MindfulCoyote
        last edited by

        Update, I was able to find a convoluted set of rules that worked. It's a pain, but it does seem to clear the active states. When I reverse the logic of the rules I provided above, the states do get cleared on schedule. Here's an example of a working rule pair (24a & 24b) below some logically identical rules that do not clear states when activated:
        TEST 22 does not clear existing states.
        TEST 23 does not clear existing states.
        The sample rule from the book does not clear existing states.
        TEST 24a does clear existing states.

        EDIT: While this worked in testing, it is failing when in production. I am still looking into it, however it seems that single IPs do much better than subnets or aliases.

        test24.png
        test24.png_thumb

        Err

        –
        Erreu Gedmon

        Firewalls are hard...
        but the book makes it easier: https://portal.pfsense.org/book/

        1 Reply Last reply Reply Quote 0
        • ?
          Guest
          last edited by

          My solution employing a Cron job:

          https://forum.pfsense.org/index.php?topic=77168.msg424793#msg424793

          ;)

          1 Reply Last reply Reply Quote 0
          • M
            MindfulCoyote
            last edited by

            Thanks chemlud I'll probably try that next.

            Err

            –
            Erreu Gedmon

            Firewalls are hard...
            but the book makes it easier: https://portal.pfsense.org/book/

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.