Firewall Rules

[tobijuan]

How to add/edit/erase firewall rules using shell?

[Gertjan]

True, nothing is said in the manual about that - probably because pfSense is GUI driven.

This :

There is no need for any UNIX knowledge, no need to use the command line for anything, and no need to ever manually edit any rule sets.

Although some possibilities exist.
I don't remember where it was discussed, probably in the Firewalling part of the forum.

Note that "ip" is the firewall so https://www.freebsd.org/cgi/man.cgi?ip
Changing the firewall using the console access will for sure conflict with the GUI settings, the latter being synced (from GUI to actual 'ip' rules - not the other way around).

[fireodo]

@Gertjan said in Firewall Rules:

Note that "ip" is the firewall so https://www.freebsd.org/cgi/man.cgi?ip

Not the "pf" ?

Regards

[Gertjan]

@fireodo said in Firewall Rules:

Not the "pf" ?

You're right !!

https://www.freebsd.org/cgi/man.cgi?pf

[Renat]

I think this will help you
https://docs.netgate.com/pfsense/en/latest/book/config/what-to-do-when-locked-out-of-the-webgui.html
https://forum.netgate.com/topic/13464/change-firewall-rules-with-shell