Problem with ordering

romor

Hello,

i have problem with pfBlocker rules ordering Its not a bug, its feature:-)

I need to have Whitelist on top of firewall rules, because some of our branches have IP in blacklist and theyer providers dont want solved this problem (existence in blacklist).
That mean, in ordering i need select

because if i select first (default) value, whitelist rule is automatically behind pfBlocker Block rules. Thats bad.

But problem is on another interfaces, because on bottom of list i have Allow rule for access to inenet.
FW list like this:

Allow rules
Deny rules
Allow rule to internet

Allow rules
Allow rule to internet
Deny rules

That mean, all traffic from all interface are after turning on pfBlocker allowed.

My question sounds: "Can you add new order like | pfB_Pass/Match | pfB_Block/Reject | All other Rules | (original format)??"

Or exist solution, that if firewall process all firewall rules, automatic allow all traffic?? In this moment after process all firewall rules all traffic is blocked.

Thanks…

BBcan177

Unfortunately, there are millions of possibilities to re-order the Firewall rules… I can't add every possibility...

You can try to create some of your pfSense rules in pfBlockerNG (using the customlist and Adv. In/Out settings), so that it can be ordered as required... or you might need to use "Alias Type" rules, which are manually created... refer to the blue infoblocks in the IPv4 Tab (List Action) on how to do that...

romor

Hi, ok, i found another solution, i use pfBlocker only to WAN and all is ok now with main ordering.

But i have another problem.
If i order my rules, pfblocker after update order my rule to another position.
Why?
He have some algorithm to it??
Because i dont see sort by name or IP, or port..

But ordering is different as before update pfBlocker. All rules is same type (allow).

For example, after turning on pfBlocker is rule list::
Rule 3
Rule 1
Rule 2

I change it to:
Rule 3
Rule 2
Rule 1

And after rerun pfBlocker or Update list is again:
Rule 3
Rule 1
Rule 2

Why, please?

BBcan177

Change the "Rule Order" setting in the General tab to suit your network, or choose an "alias type" and create the rules as required for your setup.

romor

Thank you very much. I change all to Alias type and make own rules manualy and all is working.