IPsec working without rules?
I have created an IPsec connection and everything works fine. But I don't have created any rules. No floating and nothing in WAN as well. But I can connect to the pfSense. If I check the firewall logs, I see that it allows the traffic from port 500 and 4500 with the description:
IPsec: Mobiluser Phase 1 - inbound isakmp (1000107391) (Port 500)
IPsec: Mobiluser Phase 1 - inbound nat-t (1000107392) (Port 4500)
But where did these rules got created?
I would like to allow traffic only from some countries. For that I use pfBlocker and GeoIP but of course this doesnt work, because I can't set these rules.
What am I doing wrong here?
Got! Had to disable the auto generated VPN rules.