Interface Groups and Multi WAN
-
Hi All,
I have a question about using firewall rules on interface groups in a multi wan setting.
I understand the reasoning with regards the "reply-to" in a multi wan situation.
However, I am wondering if it's ok to have a firewall rule on an interface group on the "inside" of the network.
I have multiple VLANs which come together at the pfsense, and then they exit one of two WAN links.
If I collect all my VLANs into an interface group, then apply a firewall rule to that interface group to prevent outgoing traffic, I suspect that this will be ok.
Can anyone confirm if this is ok?
Thanks
Chris.p.s. we are a school and are required to restrict internet access hence the requirement for filters on outgoing traffic from our student vlans.
-
Yes, you can do that.
The reply-to only affects incoming traffic on interfaces with a gateway, so presumably only your WANs. -
interface group for WAN
and multi WAN is not recomended
i run into that problem some time ago and failed bigsolution not usin interface groups and multi WAN worked perfect
-
@noplan
We're talking about grouping internal networks here, not WANs. That will be no problem for directing the traffic to the desired gateway. -
Thanks for the responses folks. Much appreciated.
-
group of internal networks no problem
directing traffic to a different gateway than default
brNP
