Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Regra de firewall com aliases no pfsense parando.

    Scheduled Pinned Locked Moved Portuguese
    16 Posts 2 Posters 3.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      moisesdfelix
      last edited by

      Segue o LOG do teste que acabei de fazer.:

      
May 16 23:23:57	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:49584	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 201.57.155.40:443	TCP:S
 block/1000000103
May 16 23:23:57	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:57260	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.222.222:53	UDP
 block/1000000103
May 16 23:23:57	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:51092	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.222.222:53	UDP
 block/1000000103
May 16 23:23:57	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:49611	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.222.222:53	UDP
 block/1000000103
May 16 23:23:57	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:50893	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.222.222:53	UDP
 block/1000000103
May 16 23:23:57	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:51777	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.220.220:53	UDP
 block/1000000103
May 16 23:23:57	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:137	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 192.168.0.255:137	UDP
 block/1000000103
May 16 23:23:57	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:56615	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.220.220:53	UDP
 block/1000000103
May 16 23:23:57	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:55981	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.220.220:53	UDP
 block/1000000103
May 16 23:23:57	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:57577	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.222.220:53	UDP
 block/1000000103
May 16 23:23:57	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:137	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 192.168.0.255:137	UDP
 block/1000000103
May 16 23:23:57	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.233:46543	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 255.255.255.255:10001	UDP
 block/1000000103
May 16 23:23:56	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:51492	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.220.220:53	UDP
 block/1000000103
May 16 23:23:56	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:57244	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.222.220:53	UDP
 block/1000000103
May 16 23:23:56	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:51467	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 8.8.8.8:53	UDP
 block/1000000103
May 16 23:23:56	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:57660	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.222.220:53	UDP
 block/1000000103
May 16 23:23:56	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:137	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 192.168.0.255:137	UDP
 block/1000000103
May 16 23:23:56	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:49583	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 201.57.155.40:443	TCP:S
 block/1000000103
May 16 23:23:56	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.18:63353	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 180.87.4.151:443	TCP:S
 block/1000000103
May 16 23:23:56	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.18:63352	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 180.87.4.149:443	TCP:S
 block/1000000103
May 16 23:23:56	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:49471	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 8.8.8.8:53	UDP
 block/1000000105
May 16 23:23:56	RNNET	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List [fe80::e68d:8cff:fe3d:4bb6]:5678	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic [ff02::1]:5678	UDP
 block/1000000103
May 16 23:23:56	RNNET	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.9.9.254:36841	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 255.255.255.255:5678	UDP
 block/1000000103
May 16 23:23:55	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:51929	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 8.8.8.8:53	UDP
 block/1000000103
May 16 23:23:55	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.231:59027	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 255.255.255.255:10001	UDP
 block/1000000103
May 16 23:23:55	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.232:43845	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 255.255.255.255:10001	UDP
 block/1000000103
May 16 23:23:55	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:49818	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.222.222:53	UDP
 block/1000000103
May 16 23:23:55	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:50838	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.222.222:53	UDP
 block/1000000103
May 16 23:23:55	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:49728	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.220.220:53	UDP
 block/1000000103
May 16 23:23:55	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:49965	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.220.220:53	UDP
 block/1000000103
May 16 23:23:55	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:57868	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.220.220:53	UDP
 block/1000000103
May 16 23:23:55	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:57319	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.220.220:53	UDP
 block/1000000103
May 16 23:23:55	RNNET	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 0.0.0.0:68	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 255.255.255.255:67	UDP
 block/1000000103
May 16 23:23:54	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:49584	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 201.57.155.40:443	TCP:S
 block/1000000103
May 16 23:23:54	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:51280	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.222.222:53	UDP
      1 Reply Last reply Reply Quote 0
      • M
        moisesdfelix
        last edited by

        Tentando acessar o GMAIL de outro host e não funfa. ae eu vou e habilito a regra Default da LAN e volta funcionar de boas, contudo minhas demais regras cai por terra.  :(

        
	Time	If	Source	Destination	Proto
 block/1000000103
May 16 23:36:54	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.18:137	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 192.168.0.255:137	UDP
 block/1000000103
May 16 23:36:54	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:50150	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.220.220:53	UDP
 block/1000000103
May 16 23:36:54	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:51045	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.220.220:53	UDP
 block/1000000103
May 16 23:36:54	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:51756	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.220.220:53	UDP
 block/1000000103
May 16 23:36:54	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:51561	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.220.220:53	UDP
 block/1000000103
May 16 23:36:54	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:50750	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.220.220:53	UDP
 block/1000000103
May 16 23:36:54	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.18:137	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 192.168.0.255:137	UDP
 block/1000000103
May 16 23:36:54	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.240:58241	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 180.87.4.151:443	TCP:S
 block/1000000103
May 16 23:36:54	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.18:63437	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 201.57.155.45:443	TCP:S
 block/1000000103
May 16 23:36:53	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:50533	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 8.8.8.8:53	UDP
 block/1000000103
May 16 23:36:53	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:49984	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 186.192.81.25:80	TCP:S
 block/1000000103
May 16 23:36:53	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.18:61221	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 201.57.155.45:443	UDP
 block/1000000103
May 16 23:36:53	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:51584	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 8.8.8.8:53	UDP
 block/1000000103
May 16 23:36:53	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.18:63436	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 201.57.155.30:443	TCP:S
 block/1000000103
May 16 23:36:53	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.20:49983	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 186.192.81.25:80	TCP:S
 block/1000000103
May 16 23:36:53	RNNET	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 60.15.201.56:41065	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 186.250.16.102:23	TCP:S
 block/1000000103
May 16 23:36:52	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.230:43958	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 255.255.255.255:10001	UDP
 block/1000000103
May 16 23:36:52	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:49571	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.222.222:53	UDP
 block/1000000103
May 16 23:36:52	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:50253	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 208.67.220.220:53	UDP
 block/1000000103
May 16 23:36:52	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.18:63435	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 201.57.155.30:443	TCP:S
 block/1000000103
May 16 23:36:52	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.19:51397	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 8.8.8.8:53	UDP
 block/1000000103
May 16 23:36:52	LAN	Icon Reverse Resolve with DNS  Icon Easy Rule: Add to Block List 192.168.0.18:61221	Icon Reverse Resolve with DNS  Icon Easy Rule: Pass this traffic 201.57.155.45:443	UDP
        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          Esse não parece ser o log de sistema.

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • M
            moisesdfelix
            last edited by

            Segue o Link da imagem:

            https://drive.google.com/open?id=0B9_oYyt6BqciYjNCRWd5REpzWjg

            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              Esse é o log de regras. Procura a aba de logs do sistema operacional.

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • M
                moisesdfelix
                last edited by 

                Lwast 2000 system log entries
May 16 23:59:59	php-fpm[1305]: /index.php: Successful login for user 'admin' from: 189.124.218.203
May 16 23:59:59	php-fpm[1305]: /index.php: Successful login for user 'admin' from: 189.124.218.203
May 16 23:59:25	php-fpm[1305]: /index.php: User logged out for user 'admin' from: 189.124.218.203
May 16 23:57:59	php-fpm[48180]: /rc.filter_configure_sync: Could not find IPv6 gateway for interface (wan).
May 16 23:57:57	check_reload_status: Reloading filter
May 16 23:57:51	check_reload_status: Syncing firewall
May 16 23:21:45	php-fpm[58898]: /rc.filter_configure_sync: Could not find IPv6 gateway for interface (wan).
May 16 23:21:43	check_reload_status: Reloading filter
May 16 23:21:37	check_reload_status: Syncing firewall
May 16 22:45:28	php-fpm[57316]: /index.php: Successful login for user 'admin' from: 189.124.218.203
May 16 22:45:28	php-fpm[57316]: /index.php: Successful login for user 'admin' from: 189.124.218.203

                Use o [ c o d e ] e [ / c o d e] (sem os espaços )para postar logs, ajuda muito na visualização.

                1 Reply Last reply Reply Quote 0
                • M
                  moisesdfelix
                  last edited by

                  Fui em STATUS ->SYSTEM LOGS -> E depois selecionei aba "system". é essa ?

                  1 Reply Last reply Reply Quote 0
                  • marcellocM
                    marcelloc
                    last edited by

                    Nenhum erro de resolução aparente. Edite e salve o alias novamente e veja como fica a tabela dele no menu diagnostic.

                    Olha também nos logs a abs de dns.

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • M
                      moisesdfelix
                      last edited by

                      Editei o aliases e fui em diagnostic -> tablets e continuou aparecendo só um endereço. na aba de DNS observei que existem vários endereços da tabela problematica "IPsLiberados" mandando limpar entrada.

                      
May 16 23:35:22	filterdns: clearing entry 192.168.0.214 from table IPsLiberados on host 192.168.0.214
May 16 23:35:22	filterdns: clearing entry 192.168.0.71 from table IPsLiberados on host 192.168.0.71
May 16 23:35:22	filterdns: clearing entry 192.168.0.193 from table IPsLiberados on host 192.168.0.193
May 16 23:35:22	filterdns: clearing entry 138.0.253.166 from table IpsConfiaveis on host 138.0.253.166
May 16 23:35:22	filterdns: clearing entry 192.168.0.1 from table IPsLiberados on host 192.168.0.1
May 16 23:35:22	filterdns: clearing entry 131.253.14.195 from table ipsCaixa on host 131.253.14.195
May 16 23:35:22	filterdns: clearing entry 189.124.236.232 from table IpsConfiaveis on host 189.124.236.232
May 16 23:35:22	filterdns: clearing entry 174.35.87.109 from table ipsCaixa on host 174.35.87.109
May 16 23:35:22	filterdns: clearing entry 192.168.0.173 from table IPsLiberados on host 192.168.0.173
May 16 23:35:22	filterdns: clearing entry 192.168.0.240 from table IPsLiberados on host 192.168.0.240
May 16 23:35:22	filterdns: clearing entry 104.209.132.34 from table ipsCaixa on host 104.209.132.34
May 16 23:35:22	filterdns: clearing entry 192.168.0.206 from table IPsLiberados on host 192.168.0.206
May 16 23:35:22	filterdns: clearing entry 208.82.16.68 from table ipsCaixa on host 208.82.16.68
May 16 23:35:22	filterdns: clearing entry 192.168.0.220 from table IPsLiberados on host 192.168.0.220
May 16 23:35:22	filterdns: clearing entry 138.0.253.166 from table ipsCaixa on host 138.0.253.166
May 16 23:35:22	filterdns: clearing entry 174.35.87.114 from table ipsCaixa on host 174.35.87.114
May 16 23:35:22	filterdns: clearing entry 192.168.0.181 from table IPsLiberados on host 192.168.0.181
May 16 23:35:22	filterdns: clearing entry 192.168.0.20 from table IPsLiberados on host 192.168.0.2
                      1 Reply Last reply Reply Quote 0
                      • M
                        moisesdfelix
                        last edited by

                        na mesma opção diagnostic -> tablets eu consigo visualizar normalmente todos os IPs dos demais aliases. somente este "IPsLiberados" é que tá dando trabalho rsrs

                        1 Reply Last reply Reply Quote 0
                        • marcellocM
                          marcelloc
                          last edited by

                          Com um alias de ips, isso não deveria estar acontecendo.

                          Conferiu o tipo de alias que criou?

                          Cria outro alias com os mesmos ips e vê o que acontece

                          Treinamentos de Elite: http://sys-squad.com

                          Help a community developer! ;D

                          1 Reply Last reply Reply Quote 0
                          • M
                            moisesdfelix
                            last edited by

                            Obrigado pelo apoio Marcelo!

                            criei um novo aliases, apareceu em tablet e funcinou de boas. vamos observar amnhã como ele irá se comportar, já que essa osilação demorava um pouco rsrs.

                            Grato pela ajuda Amigo.

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.