Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Inbound Port Rule above DNSBL

    pfBlockerNG
    2
    6
    600
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      lordjynx last edited by

      I'm having issues getting PFB to auto create a rule for an inbound custom port.  The rule won't auto generate. I'm needing it for verification/communication in Transmission software but the DNSBL I added in PFB is blocking the testing site.

      Here's my setup:

      Advanced Inbound Firewall Rule:

      Custom DST Port checked - alias set to Transmission_Port
      Custom DST checked - alias pointing to the server running the Transmission software

      The rule is never created thus I can't set PFB to allow the custom port first, then deny as usual.

      Any ideas why the rule isn't being auto created?

      1 Reply Last reply Reply Quote 0
      • L
        lordjynx last edited by

        Settings for the inbound rule








        1 Reply Last reply Reply Quote 0
        • RonpfS
          RonpfS last edited by

          1 ) There is no list defined (do you have anything defined in IPv4 Custom List?)
          2)  Update frequency is set to Never.

          This doesn't create any table nor rule.

          2.4.5-RELEASE-p1 (amd64)
          Intel Core2 Quad CPU Q8400 @ 2.66GHz 8GB
          Backup 0.5_5, Bandwidthd 0.7.4_4, Cron 0.3.7_5, pfBlockerNG-devel 3.0.0_16, Status_Traffic_Totals 2.3.1_1, System_Patches 1.2_5

          1 Reply Last reply Reply Quote 0
          • L
            lordjynx last edited by

            IPv4 custom list is empty.  Should I put the IP address of the server running transmission there?

            How often should the list frequency be set?  Does it matter if the list is static ^ ?

            Thanks!

            1 Reply Last reply Reply Quote 0
            • L
              lordjynx last edited by

              Adding the server address appears to only allow it from the local host.  I'm needing it worldwide as I'm not sure what IPs will be connecting.

              Again, thanks for the insights!

              1 Reply Last reply Reply Quote 0
              • L
                lordjynx last edited by

                I believe I got it by adding my server's IP address and doing "Inverse" on the rule.

                Thanks for helping out this newb! :)

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post