<![CDATA[PfBlocker - Prevent rules from re-sorting]]>I've created an alias of IP's I'd like to allow that would otherwise be blocked by pfblocker (exceptions).  I've moved this list above pfBlocker because I want the rest of that continent blocked.  Every time pfBlocker updates (CRON), it re-sorts my alias under/after pfBlocker.

Is there any way to 1) keep it from changing the sort or 2) add a rule order of "manual sort" or is there a 3) this functionality already exists and I've just missed it?

]]>https://forum.netgate.com/topic/101639/pfblocker-prevent-rules-from-re-sortingRSS for NodeSun, 19 Jul 2026 00:57:17 GMTFri, 17 Jun 2016 12:43:10 GMT60<![CDATA[Reply to PfBlocker - Prevent rules from re-sorting on Fri, 17 Jun 2016 22:56:07 GMT]]>I chose the first rule.

I also created an alias (pfsense, not pfbng) to allow the particular IP's I want and put that as the first rule. Everything works like a charm for an hour, then the CRON job resorts to the Rule Order.

Looks like I can accomplish the same thing through pfbng's alias system.  Wasn't aware that's what the ipv4 and ipv6 tabs were for.

btw, the help link on the ipv4 tab is broken (https://<url to="" pfsense="">/help.php?page=/pfblockerng/pfblockerng_v4lists.xml)

Thanks for your help - I'll tinker from here until I get it.</url>

]]>https://forum.netgate.com/post/632451https://forum.netgate.com/post/632451Fri, 17 Jun 2016 22:56:07 GMT<![CDATA[Reply to PfBlocker - Prevent rules from re-sorting on Fri, 17 Jun 2016 21:19:57 GMT]]>Did you select one of these Rule Order options?

How did you create this Exception list? Best to create a new pfBlockerNG "Permit Outbound" alias.
Are you using Floating rules?

]]>https://forum.netgate.com/post/632431https://forum.netgate.com/post/632431Fri, 17 Jun 2016 21:19:57 GMT<![CDATA[Reply to PfBlocker - Prevent rules from re-sorting on Fri, 17 Jun 2016 14:08:25 GMT]]>Nope.  All settings re-order with each CRON update.  So there's no way that I can find to set a bypass alias above pfblocker and leave it there permanently.

]]>https://forum.netgate.com/post/632355https://forum.netgate.com/post/632355Fri, 17 Jun 2016 14:08:25 GMT<![CDATA[Reply to PfBlocker - Prevent rules from re-sorting on Fri, 17 Jun 2016 12:57:17 GMT]]>Select the "Rule Order" option in the General Tab.

]]>https://forum.netgate.com/post/632336https://forum.netgate.com/post/632336Fri, 17 Jun 2016 12:57:17 GMT