Just confirming IPv4+IPv6 is same as a separate rule for each
-
Hello,
The answer to this question might seem obvious but I'm asking because of the way a new install is setup. I'm new to pfsense and I noticed that on a fresh install, the default LAN has separate pass rules for IPv4 and IPv6 where the only thing different is the Address Family.
Is creating a single rule with Address Family "IPv4+IPv6" just as effective?
-
Depends on what you mean by effective ;)
If you want to log say ipv4 and not ipv6 than single rule wouldn't be helpful…
If your ok with the rule details being the same for ipv4 and ipv6 you should be fine. If you need to create a rule specific for one or the other would be why you would want/need to split them up. Protocols like icmp and icmp6 are different so those sorts of rules need to be split.
-
That cleared it up. For the use case I'm dealing with the rules are the same for IPv4 and IPv6 and I'm trying to make sure the firewall rule allows both without having to have separate rules. Thanks johnpoz.
