Firewall information request
-
Hello everyone, I realized that the firewall blocks an access from Wan from an ip that belongs to the subnet of the router of the ISP, is it dangerous?
Here the screenshot https://ncloud.zaclys.com/index.php/s/5DH2DWYzcnKpyqQThanks!
-
no it's not dangerous, they are probably hits coming from your router and pc/device you have before pfsense, this will happen when you have a double nat situation. there are some ISP that nat traffic to the user with a private address (fastweb for example) but this is not your case.
go to Interfaces / WAN and remove the tick to "block private networks and loopback addresses"
-
@kiokoman thanks!
-
That is just noise, its all broadcast traffic..
-
@johnpoz Thanks!
-
I would just set it not to log that.. Noise makes it harder to see interesting stuff.
-
@johnpoz I'm trying... :-) thanks!
-
Simple way to not log all that noise is just turn off logging default, and then just set a rule to block and log only SYN tcp traffic..
If you want to see UDP traffic, that is blocked and atleast of some interest then set the rule to log only UDP actually directed to your address..
-
@johnpoz Thanks!
