Firewall Functional Block Diagram
-
I've been trying to figure out how the firewall works, and in the process done my best to create a "functional Block Diagram". Thought I would share it with the group to get feedback on the accuracy, and that it might help others get up to speed.
Unfortunately that didn't work, so I've removed it to avoid confusing anyone… thanks to johnpoz for setting me straight... back to the drawing board.
-
Blue boxes? I don't see any blue boxes.. We don't need any stinking blue boxes ;) hehehehe No really there are no blue boxes.. You mean the darker green rectangles? ;)
Floating rules are evaluated before interface rules.. So looking at this looks like interface rules would be evaluated first, and then floating. Also you forget nat, nat happens before other rules.
https://doc.pfsense.org/index.php/Firewall_Rule_Processing_Order