Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Scheduled Maintenance Rule

    Scheduled Pinned Locked Moved General pfSense Questions
    4 Posts 2 Posters 688 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D Offline
      dmcushing
      last edited by

      I have  a NAT rule pointing to a web server.
      Our Dev team wants a 3 hour maintenance window where no Internet users can hit the site.
      The scheduler seems to work opposite to this, it schedules when a rule is active.

      What is the suggested method to achieve a block of this service for scheduled maintenance? A scheduled block rule that follows the allow rule? (seems a bit counter intuitive)

      1 Reply Last reply Reply Quote 0
      • D Offline
        doktornotor Banned
        last edited by

        @dmcushing:

        The scheduler seems to work opposite to this, it schedules when a rule is active.

        Uhm, and the problem with that is exactly what? Schedule when the NAT is active (i.e., all times outside of maintenance.)

        @dmcushing:

        A scheduled block rule that follows the allow rule? (seems a bit counter intuitive)

        Rules are top down, first match. You have it reversed.

        1 Reply Last reply Reply Quote 0
        • D Offline
          dmcushing
          last edited by

          Uhm, and the problem with that is exactly what? Schedule when the NAT is active (i.e., all times outside of maintenance.)

          Nothing wrong with it, my first time trying to schedule rules, so just looking for some help. It just works opposite of what I thought.

          Rules are top down, first match. You have it reversed.

          Thanks. You're correct, I misspoke.

          The scheduler set up presents a single month as the default interface, so I thought I'd be able to click on the day, pick the hours and say 'disable this rule'. The documentation is a bit sketchy on scheduling rules that match what I'm looking for so I thought I'd ask the community.

          I'll create a block rule and test. Thanks for your help.

          1 Reply Last reply Reply Quote 0
          • D Offline
            doktornotor Banned
            last edited by

            I'd frankly start with the allow rule scheduling, results with scheduling block rules are not exactly convincing for some people due to dangling states.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.