Firewall Floating Rules Selecting Interfaces
-
When creating a floating rule, there is a multi-select box allowing the selection of one or more interfaces. What happens if none of the interfaces are selected? Does the rule apply by default to ALL traffic on all interfaces, or does it apply to none?
-
The floating rule will apply to all interfaces.
I just tried it. The pf rule that is written does not specify any interface, which should effectively be "all". The floating rule happily accumulates plenty of MB of traffic that it has "processed".The doc https://docs.netgate.com/pfsense/en/latest/book/firewall/floating-rules.html could be updated to mention this.
As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/ -
Thank you!
-
@phil-davis Agreed. Yea, I'm resurrecting an old thread. But this is a detail that should be in the floating rule documentation. Truth be told that is where I went first for an answer and ended up here instead.
