Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    making changes to rules applied only after reboot

    Scheduled Pinned Locked Moved Firewalling
    22 Posts 2 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • O
      oren1031
      last edited by

      now i took it up to 2400000 for now im getting no error.

      1 Reply Last reply Reply Quote 0
      • O
        oren1031
        last edited by

        but look like pfblocker is doing its job...
        cc357ba2-2ac5-4b2e-be00-a46f8560050a-image.png

        johnpozJ 1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @oren1031
          last edited by

          Wouldn't it just be easier to allow what you want ;) Out of the box all is blocked anyway. Just use geoip list of what you want to allow to hit your port forward/exposed ports..

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • O
            oren1031
            last edited by

            that is what i did. blocked all but what i want to be enabled.

            johnpozJ 1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @oren1031
              last edited by johnpoz

              Why are you loading the NA list then? Just for your picture of where IPs are from?

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • O
                oren1031
                last edited by

                im blocking all inbounds. from everywhere but my country.
                isnt that the way to go? if i have a service i want to be accessed only from my country to minimize exposer?

                johnpozJ 1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @oren1031
                  last edited by johnpoz

                  Again just allow your country on your rule/port forward. All is blocked by default.. There is little reason to load up some table of all NA v6, when ALL is blocked by default. And your allow is only your country list of IP ranges.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • O
                    oren1031
                    last edited by

                    so when allowing only 1 country all others will be blocked by pfblocker?
                    is that what you mean?
                    no need for block rules because all that is not allowed is blocked?

                    1 Reply Last reply Reply Quote 0
                    • O
                      oren1031
                      last edited by

                      what is the downside? of using it the way i do?
                      keeping in mind i have i3 with 8 gig ram. so its not really
                      working that hard.. its a home environment.

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @oren1031
                        last edited by

                        What trying to load every known IP on the planet to put in a list so you can block it? When ALL ips are blocked by default anyway ;)

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • O
                          oren1031
                          last edited by

                          ill try what you offer it is more logic. i was not aware that it block by default.
                          also i like the picture :)

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.