Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Toggle rules or rulesets via php or perl?

    Scheduled Pinned Locked Moved Firewalling
    7 Posts 3 Posters 657 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      sgw
      last edited by

      A customer asks me for the possibility to somehow build some simplified webGUI to toggle firewall rules or rulesets:

      for example: allow the TV-set to access internet (nanny should be able to click that one red button, but not be allowed to access pfsense itself)

      Ideally he would like to be able to integrate that into his FHEM-based (https://fhem.de/) home automation setup.

      Is there a way to do that?

      1 Reply Last reply Reply Quote 0
      • GertjanG
        Gertjan
        last edited by

        Hi,

        Short answer : noop.
        As far as I know, there is no API.

        But : you said "client", so maybe : yes ;)

        If "php" doesn't scare you, have a look at this GUI page : Diagnostics => Backup & Restore  => Backup & Restore and checkout the  restore part, on the bottom of the page.
        Done that, see this file : /usr/local/www/diag_backup.php

        You mission : throw out all the backup stuff, most pf the "restore" stuff, hard-lock the restore part to "firewall rules" - no need to chose the file, write to identical functions, one with the "all the  firewall rules and the rule that stops the tv" file hard coded  and another one, "all the  firewall rules and the rule that enables the tv" file hard coded.
        These two firewall rule files are easy to generate : make them yourself with the "export" or "backup" function (chose "firewall" only).

        Up to you to make a stand alone page - or, have it integrated into the GUI. Two huge buttons and done.

        The good news is that pfSense does not need to be restarted when a firewall rules change, but double check that 'states' are flushed.

        Btw : Check : You probably have to reload all the firewall rules for all the interfaces.

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        1 Reply Last reply Reply Quote 0
        • GrimsonG
          Grimson Banned
          last edited by

          https://doc.pfsense.org/index.php/Adding_Rules_With_easyrule

          1 Reply Last reply Reply Quote 0
          • S
            sgw
            last edited by

            oh, that sounds way too scary to me!
            I simply look for the equivalent of scripting the click on the checkbox on the page "Firewall Rules" : enable/disable one rule

            1 Reply Last reply Reply Quote 0
            • S
              sgw
              last edited by

              @Grimson:

              https://doc.pfsense.org/index.php/Adding_Rules_With_easyrule

              This isn't the requested functionality.

              1 Reply Last reply Reply Quote 0
              • GrimsonG
                Grimson Banned
                last edited by

                @sgw:

                @Grimson:

                https://doc.pfsense.org/index.php/Adding_Rules_With_easyrule

                This isn't the requested functionality.

                From the above:

                The source code of those scripts can be adapted for adding firewall rules in other ways, but that is left as an exercise for the reader.

                So start working and earn that money from your client.

                1 Reply Last reply Reply Quote 0
                • S
                  sgw
                  last edited by

                  @Grimson:

                  From the above:

                  The source code of those scripts can be adapted for adding firewall rules in other ways, but that is left as an exercise for the reader.

                  So start working and earn that money from your client.

                  I now took a closer look, yes, that might help! Thanks!

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.