virusprot table
-
we have an IP that keeps showing up in the virusprot table. would we adjust the advanced settings for the rule so that it does not get blocked? we do not want this host to ever get blocked.
-
It's actually being flagged by ClamAV?
-
sorry, I'm new to pfsense. I have no idea what ClamAV is.
-
Oh, ignore that! It's in there because the connection rate from that client is over the limit which is usually an indication of some malware.
https://docs.netgate.com/pfsense/en/latest/monitoring/status/firewall-tables.html#default-tablesIs that host really legitimately opening those connections?
Steve
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.