Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    making changes to rules applied only after reboot

    Scheduled Pinned Locked Moved Firewalling
    22 Posts 2 Posters 1.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • O
      oren1031
      last edited by

      but look like pfblocker is doing its job...
      cc357ba2-2ac5-4b2e-be00-a46f8560050a-image.png

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @oren1031
        last edited by

        Wouldn't it just be easier to allow what you want ;) Out of the box all is blocked anyway. Just use geoip list of what you want to allow to hit your port forward/exposed ports..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • O
          oren1031
          last edited by

          that is what i did. blocked all but what i want to be enabled.

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @oren1031
            last edited by johnpoz

            Why are you loading the NA list then? Just for your picture of where IPs are from?

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • O
              oren1031
              last edited by

              im blocking all inbounds. from everywhere but my country.
              isnt that the way to go? if i have a service i want to be accessed only from my country to minimize exposer?

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @oren1031
                last edited by johnpoz

                Again just allow your country on your rule/port forward. All is blocked by default.. There is little reason to load up some table of all NA v6, when ALL is blocked by default. And your allow is only your country list of IP ranges.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • O
                  oren1031
                  last edited by

                  so when allowing only 1 country all others will be blocked by pfblocker?
                  is that what you mean?
                  no need for block rules because all that is not allowed is blocked?

                  1 Reply Last reply Reply Quote 0
                  • O
                    oren1031
                    last edited by

                    what is the downside? of using it the way i do?
                    keeping in mind i have i3 with 8 gig ram. so its not really
                    working that hard.. its a home environment.

                    johnpozJ 1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @oren1031
                      last edited by

                      What trying to load every known IP on the planet to put in a list so you can block it? When ALL ips are blocked by default anyway ;)

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • O
                        oren1031
                        last edited by

                        ill try what you offer it is more logic. i was not aware that it block by default.
                        also i like the picture :)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.