Disable action does not work ?

chudak

@ronpfs said in Disable action does not work ?:

When was this settings configured ? Look at both aliases to see if they are still relevant.

The problem is I don;t actually remember when and how :)

So I'd say no need for them. But when I try to disable "Custom DST Port" and "Custom Destination" and Save I get:

???

What do you see there ?

RonpfS

@chudak Strange. You are sure you untick both boxes, save, etc ?

chudak

@ronpfs said in Disable action does not work ?:

@chudak Strange. You are sure you untick both boxes, save, etc ?

Yup, unchecked both and on save that error.

Do you have aliases in tee WL?

RonpfS

@chudak And you did that in the Whitelist group ? not with the FW rules.
I do have a Whitelist rules with both boxes unticked, maybe empty the field also.

chudak

@ronpfs

Not sure what you call "the Whitelist group"
I have it in my IPv4 list

Tried emptying as well with no love

RonpfS

@chudak said in Disable action does not work ?:

Not sure what you call "the Whitelist group"

Permit group ....

chudak

@ronpfs said in Disable action does not work ?:

@chudak said in Disable action does not work ?:

Not sure what you call "the Whitelist group"

Permit group ....

is Permit group different from my ?
where is the Permit group ?

RonpfS

@chudak Well you have a Group Whitelist for IP permit both. Mine is permit Outbound.

chudak

@ronpfs said in Disable action does not work ?:

@chudak Well you have a Group Whitelist for IP permit both. Mine is permit Outbound.

ok i see, seems like the same then

chudak

@ronpfs

are you on pfBlockerNG-devel 3.0.0_16 ?

RonpfS

@chudak With permit both, the FW rules requires Custom port/dest settings, this is a requirement from pfSense, nothing to do with pfBlockerNG.

With permit Outbound that requirements isn't needed. Check the forum for similar issues.

chudak

@ronpfs said in Disable action does not work ?:

@chudak With permit both, the FW rules requires Custom port/dest settings, this is a requirement from pfSense, nothing to do with pfBlockerNG.

With permit Outbound that requirements isn't needed. Check the forum for similar issues.

copy that

what do you have ?

RonpfS

@chudak Permit outbound, any protocol ,nothing in Advanced FW Rules

chudak

@ronpfs said in Disable action does not work ?:

@chudak Permit outbound, any protocol ,nothing in Advanced FW Rules

I’ve changed my to Permit outbound and my Issues including https://forum.netgate.com/topic/162857/problem-after-pfblockerng-devel-3-0-0_16-update/13 are gone !

I’m very puzzled. How it used to work all this time and how it was setup like this. Need to do explaining to myself :)

Thanks a million for being patient!

How does permit outbound actually works ? (Need to think about it)

RonpfS

@chudak said in Disable action does not work ?:

How does permit outbound actually works ? (Need to think about it)

That may contain some answers : https://docs.netgate.com/

chudak

@ronpfs said in Disable action does not work ?:

@chudak said in Disable action does not work ?:

How does permit outbound actually works ? (Need to think about it)

That may contain some answers : https://docs.netgate.com/

I am sure it does !

Is Permit Outbound default setting for white lists ?