Firewall Rule Numbers
-
Not quite sure i want to do that yet but will just know that this particular rule number relates to the default rules and not worry about it anymore.
Thanks for all your help.
Regards
Rob
-
It's been merged to 2.2.4.
-
Question slightly OT: Is it good practice NOT to log packages blocked by the default deny rule (Settings, first option under "Log Firewall Default Blocks"?
-
Hmmm… depends on how much noise you like, or what you policies are, or whatever. Wouldn't say there's any "best practice" here.
-
Im still trying to work out the best settings since I've only been using pfsense a few months so I've left logging on most things so i can see whats going on unless i really really don't want to know about something.
-
I dont suppose you could do the same for UPnP rules as well?
Thanks
Rob
-
(This is an attempt by me to not clutter up this forum by repeating the same question, but instead information to an already existing thread if that is similar. If I did wrong by doing that I apologize).
I have the same problem as the OT. I suddenly have blocks in my FW log without descriptions. Clicking on the red cross doesn't show any other information.
(I do know this happens when you disable logging for a FW rule which was previously enabled, but I did not do such a thing at all).
Is there a place where I can find all the rule numbers together?
Log:
Click red cross:
Bonus: this description isn't right. MULLVAD is a separate interface, it is not the interface VLAN40:
Thank you for help
-
cat /tmp/rules.debugLook at the tracker. -
Thank you. I also discovered
https://pfsense/status.php -
rules.debug is the best place to get the configured rule set all in one place. It is usually one of the first places I go when evaluating a status output, depending on what the trouble is.
I never look at the rules in the config.xml. rules.debug lays them all out for you in a readable format.
