Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Status>System logs>Firewall

    Scheduled Pinned Locked Moved 2.3-RC Snapshot Feedback and Issues - ARCHIVED
    31 Posts 11 Posters 6.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DonnyD Offline
      Donny
      last edited by

      @heper:

      what do you mean by this? they are icons already? icons can be changed ofcourse, but i prefer them to be the same as the ones used in firewall_rules.php

      but my suggest is the action should be change to icon

      about the dest.port/src.port:

      i've stepped away from splitting the ports from the ip's.
      ==> there is a  inside the that is used to for reverse-dns-lookup. its called by ajax stuff i don't understand  ;  anyway, it makes it impossible to get the src/dst-port columns anywhere near to source/destination columns.

      if you have a way to get them close together, then i can try again

      at Act : "block" and "pass" should be change to icon that it used with Firewall. You can also use only word "Block" and "Pass"
      and change them to the color "Green for pass" and Red for Block" without to use the button or icon.

      1 Reply Last reply Reply Quote 0
      • B Offline
        biggsy
        last edited by

        Thanks for trying, heper.

        I'd still prefer to see the port numbers in a separate column but only if it's not going to cause a lot of work.

        Icon or text work for me.

        Only as a matter of interest, is there a way to distinguish between between drop and reject?

        1 Reply Last reply Reply Quote 0
        • P Offline
          phil.davis
          last edited by

          Only as a matter of interest, is there a way to distinguish between between drop and reject?

          Yes, there is. While looking at this stuff on 2.3-ALPHA I noticed that the Firewall Log Display is currently hard-coded to always put "Block" as the text in the button.
          Step 1: That should be fixed so it says "Pass" or "Block" as appropriate.
          Step 2: Make it use icons instead of words. Use the same icons for "pass", "block", "reject" as are used on the firewall rules display.

          Then I went to a 2.2.4 and 2.2.5 system to see how it behaved. It always showed the "blocked" icon. The "reject" icon was never displayed - not in 2.2.* and not in 2.3.

          So I fixed all that in RELENG_2_2 - https://github.com/pfsense/pfsense/pull/2012 - hopefully that can make it into 2.2.5

          For 2.3 then,

          Step 3: Make the corresponding fixes from https://github.com/pfsense/pfsense/pull/2012 RELENG_2_2 in master for 2.3

          As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
          If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

          1 Reply Last reply Reply Quote 0
          • H Offline
            heper
            last edited by

            @phil.davis step1 & 2 are done,
            do you want to handle handle step 3 ?

            https://github.com/pfsense/pfsense/pull/2013

            1 Reply Last reply Reply Quote 0
            • P Offline
              phil.davis
              last edited by

              @heper:

              @phil.davis step1 & 2 are done,
              do you want to handle handle step 3 ?

              https://github.com/pfsense/pfsense/pull/2013

              Yep, I will wait until PR 2012 and 2013 have been reviewed and the final changes committed to the respective branches. Then I will sort out what from PR 2012 in RELENG_2_2 needs to be also done in master.

              Note: This is all "bug" stuff that needs to be sorted out regardless. After that there is then the suggestions about the UI layout that are the original topic of this thread.

              As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
              If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

              1 Reply Last reply Reply Quote 0
              • S Offline
                Steve_B Netgate
                last edited by

                Replacing those glyphicons which fount-awesome icons ( https://fortawesome.github.io/Font-Awesome/icons/ ) do you think make sense for:

                • Click to resolve

                • Easyrule: add to block list

                • Easyrule: pass this traffic

                ?

                fa-info
                fa-minus-square-o
                fa-plus-square-o

                perhaps?

                So many choices  :)

                I have pushed a change that incorporates these choices as a reference.

                Als ik kan

                1 Reply Last reply Reply Quote 0
                • H Offline
                  heper
                  last edited by

                  @Steve_B:

                  • Easyrule: add to block list

                  • Easyrule: pass this traffic

                  fa-minus-square-o
                  fa-plus-square-o

                  perhaps?

                  personally  "-" & "+"  reminds me of, adding & removing. while in this case, both add a rule (one to block, the other to pass).
                  so maybe we can make both of them a "+", but use the css  color scheme?  (green=pass , red=block)

                  or

                  use different icons altogether perhaps: fa-lock / fa-unlock ?

                  1 Reply Last reply Reply Quote 0
                  • D Offline
                    divsys
                    last edited by

                    Given that icon set, might I suggest using the "hand" series such as:

                    block:    hand-paper-o or hand-rock-o
                    reject:  thumbs-o-down
                    pass:    thumbs-o-up

                    The addition of colour (red for block and reject, green for pass) would go a long way to adding clarity IMO.

                    That might give us a consistent and hopefully intuitive way of representing the dual -ve conditions for processing packets.

                    -jfp

                    1 Reply Last reply Reply Quote 0
                    • S Offline
                      Steve_B Netgate
                      last edited by

                      We need to accommodate those who do not see colors clearly. Lock/unlock might work.

                      Als ik kan

                      1 Reply Last reply Reply Quote 0
                      • DonnyD Offline
                        Donny
                        last edited by

                        Hello, I like firewall log entries layout from the picture here under more than now. For the firewall log layout now at the "Act" column should be on the left side and not right side,  It is look conflicting.
                        Icons X in the Act column look not attractive. My suggestion is: It is possible to use another icon or icon like firewall. When I point to an icon information and icon + the arrow pointer is disappear.

                        Donny

                        6h3h8n.png
                        6h3h8n.png_thumb

                        1 Reply Last reply Reply Quote 0
                        • D Offline
                          divsys
                          last edited by

                          We need to accommodate those who do not see colors clearly.

                          How about simply use Black on White for +ve and White on Black for -ve (or vice versa as consensus desires)?
                          I'm suggesting color or contrast (in this case) clues to be used in addition to icon clues.

                          -jfp

                          1 Reply Last reply Reply Quote 0
                          • BBcan177B Offline
                            BBcan177 Moderator
                            last edited by

                            Instead of defining 'icon-danger' and 'icon-success', why not just 'green' and 'red' so those css settings can be used in other places.

                            "Experience is something you don't get until just after you need it."

                            Website: http://pfBlockerNG.com
                            Twitter: @BBcan177  #pfBlockerNG
                            Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                            1 Reply Last reply Reply Quote 0
                            • B Offline
                              biggsy
                              last edited by

                              OOPS - a can of worms :)

                              @Steve_B:

                              Replacing those glyphicons which fount-awesome icons . . .

                              How about:

                              Reject          - arrow-left (orange)
                              Block/Drop  - arrow-down (red)
                              Pass            - arrow-right (green)

                              1 Reply Last reply Reply Quote 0
                              • H Offline
                                heper
                                last edited by

                                @BBcan177:

                                Instead of defining 'icon-danger' and 'icon-success', why not just 'green' and 'red' so those css settings can be used in other places.

                                the bootstrap css already contains  btn-success / btn-success /btn-warning  by default. both of those are used throughout the webgui.
                                i thought it would be better to keep follow that naming-scheme ? what do you folks think?

                                1 Reply Last reply Reply Quote 0
                                • S Offline
                                  Steve_B Netgate
                                  last edited by

                                  As well as alert-success, alert-danger etc. We also now have an optional style argument to print_info_box() that I use quite a lot:

                                  print_info_box(gettext("Changes saved."), success);

                                  So keeping with the Bootstrap style names is a good thing IMHO.

                                  Als ik kan

                                  1 Reply Last reply Reply Quote 0
                                  • dennypageD Offline
                                    dennypage
                                    last edited by

                                    Bravo.

                                    @Steve_B:

                                    We need to accommodate those who do not see colors clearly.

                                    1 Reply Last reply Reply Quote 0
                                    • R Offline
                                      router_wang
                                      last edited by

                                      PLEASE go back to the colored "BLOCKED" and "PASS". Those are so much more ergonomic than a check or an "x". From an aesthetic standpoint they look a lot better too!

                                      1 Reply Last reply Reply Quote 0
                                      • N Offline
                                        NOYB
                                        last edited by

                                        @doktornotor:

                                        • The filter should be shrinked back to two rows as it was and grow itself a "hide" feature… Waste of screen estate.

                                        Just for you (for 2.2.5)

                                        Filter Form Hide Feature
                                        Form hidden by default, shown when filtering/selected.
                                        https://github.com/pfsense/pfsense/pull/2037

                                        1 Reply Last reply Reply Quote 0
                                        • S Offline
                                          Steve_B Netgate
                                          last edited by

                                          Thanks. I'll be adding similar functionality to 2.3 in the next few days.

                                          Als ik kan

                                          1 Reply Last reply Reply Quote 0
                                          • D Offline
                                            doktornotor Banned
                                            last edited by

                                            @NOYB:

                                            Just for you (for 2.2.5)

                                            Filter Form Hide Feature
                                            Form hidden by default, shown when filtering/selected.
                                            https://github.com/pfsense/pfsense/pull/2037

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.