• Basic Firewall Set Up

    Firewalling
    4
    0 Votes
    4 Posts
    1k Views
    GertjanG

    @ccigas said in Basic Firewall Set Up:

    I guess from there, I would not have to allow DNS or HTTP/S through the firewall from there or is that not needed?

    Typically, on an second LAN interface - called OPTx - you would block http and https acces to the Firewall (= pfSense) itself.
    Don't block DNS, devices could use pfSense as a DNS, or whatever other DNS they want to use on the net.

    @ccigas said in Basic Firewall Set Up:

    For the DNS, it seemed to only work
    pfSense doesn't use or care about DNS in receives from upstream routers.
    The resolver - unbound - uses the 13 main root DNS servers (the real back bone of the Internet) to find domain info. That will always works.
    There is no need - isn't used by default :
    Ustream DNS servers,
    ISP DNS servers,
    Private info collection servers (Google and others);
    etc.

    If the default resolver doesn't work, something is wrong with your Internet access.

    Btw : 'named' or bind, isn't used by pfSense. bind is much bigger and capable, and offers functionalities that hugely surpasses the needs of a firewall.

  • Firewall rule name in logs

    Firewalling
    2
    0 Votes
    2 Posts
    1k Views
    A

    Technically, these are NOT called rule names, but descriptions instead.

    The description of my firewall rules (on LAN is where I'm logging) are in my firewall logs. If you've got no rules created, you'll have to make some that actually log the data. After that, if you look in Status -> System Logs -> Firewall in the Rule column it lists the rule description(s).

    There's also the 10 digit unique (I think) tracking ID code to make them quick to find or index.

    The only restriction listed for rule descriptions is max of 52 characters. Don't know anything about special characters, however. Here's some talk about some description stuff.

    https://forum.netgate.com/topic/92254/firewall-rule-description-length-limitation

    Jeff