• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Automatically update state based upon rule change?

Scheduled Pinned Locked Moved Firewalling
2 Posts 2 Posters 288 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • R
    rain
    last edited by Sep 22, 2017, 8:15 PM

    I use a combination of pfSense and another commercial firewall brand.

    On my commercial brand, when I make a firewall rule change, it automatically resets any states that would be affected by that rule change, and only that rule change.

    From what I can see on pfSense is that if there exists a state in play that would get modified (killed) by implementing a new rule, the only way to have that forced immediately is to reset the state table of the entire firewall.

    Is there a way to just reset the states of a new or modified rule when it is applied?

    Thanks in advance!

    1 Reply Last reply Reply Quote 0
    • J
      johnpoz LAYER 8 Global Moderator
      last edited by Sep 25, 2017, 4:25 PM

      you can search in your state table and only kill the ones you want.  For example you could look for the IP that would be involved in the state for the rule your changing and only kill those specific states.  You do not have to kill every state in the table, etc.  Which can tick off some users ;)  When you do such a thing…

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

      1 Reply Last reply Reply Quote 0
      1 out of 2
      • First post
        1/2
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
        This community forum collects and processes your personal information.
        consent.not_received