Interface rule order

[Arno 0]

Hi,

On an interface I have only one rule:

Allow IPv4 any to any

To make the firewall more strict I watched the log and added a rule above the one existing already:

Allow IPv4 UDP Source Interface IP Destination <ip adress>:1900

Both rules have log enabled.

In what order are the rules processed?
The rule with port 1900 does not show up in the log. The more general rule does.

Version: 2.5.0.a.20210104.0250

[Rico]

https://pfsense-docs.readthedocs.io/en/latest/firewall/firewall-rule-processing-order.html
So your Rule does not match or you still have existing states open.

-Rico

[Arno 0]

@rico said in Interface rule order:

or you still have existing states open.

Thanks @rico
So I have to reboot the device (iptv stb) connected to the interface? After that the rule takes effect?

[Rico]

You can flush States in
Diagnostics > States > Reset States

-Rico

[Arno 0]

Did flush. Unfortunately no change.

[johnpoz]

Post up a screenshot of your rules.

Rules are evaluated top down, first rule to trigger wins, no other rules are evaluated.

If your saying your not seeing any hits on your rule either in the interface firewall tab (the 0/0 in states column) or the log when you have the rule set to log.

Then its not being triggered. Most likely because you have the rule written in such a way its not matching.

So show us the rules you actually created via a screenshot, and then the log entry your seeing..