• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

making changes to rules applied only after reboot

Scheduled Pinned Locked Moved Firewalling
22 Posts 2 Posters 1.6k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • O
    oren1031
    last edited by Jul 12, 2021, 3:29 PM

    now i took it up to 2400000 for now im getting no error.

    1 Reply Last reply Reply Quote 0
    • O
      oren1031
      last edited by Jul 12, 2021, 3:32 PM

      but look like pfblocker is doing its job...
      cc357ba2-2ac5-4b2e-be00-a46f8560050a-image.png

      J 1 Reply Last reply Jul 12, 2021, 3:36 PM Reply Quote 0
      • J
        johnpoz LAYER 8 Global Moderator @oren1031
        last edited by Jul 12, 2021, 3:36 PM

        Wouldn't it just be easier to allow what you want ;) Out of the box all is blocked anyway. Just use geoip list of what you want to allow to hit your port forward/exposed ports..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • O
          oren1031
          last edited by Jul 12, 2021, 3:37 PM

          that is what i did. blocked all but what i want to be enabled.

          J 1 Reply Last reply Jul 12, 2021, 3:38 PM Reply Quote 0
          • J
            johnpoz LAYER 8 Global Moderator @oren1031
            last edited by johnpoz Jul 12, 2021, 3:39 PM Jul 12, 2021, 3:38 PM

            Why are you loading the NA list then? Just for your picture of where IPs are from?

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • O
              oren1031
              last edited by Jul 12, 2021, 3:40 PM

              im blocking all inbounds. from everywhere but my country.
              isnt that the way to go? if i have a service i want to be accessed only from my country to minimize exposer?

              J 1 Reply Last reply Jul 12, 2021, 6:19 PM Reply Quote 0
              • J
                johnpoz LAYER 8 Global Moderator @oren1031
                last edited by johnpoz Jul 12, 2021, 6:19 PM Jul 12, 2021, 6:19 PM

                Again just allow your country on your rule/port forward. All is blocked by default.. There is little reason to load up some table of all NA v6, when ALL is blocked by default. And your allow is only your country list of IP ranges.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • O
                  oren1031
                  last edited by Jul 12, 2021, 6:21 PM

                  so when allowing only 1 country all others will be blocked by pfblocker?
                  is that what you mean?
                  no need for block rules because all that is not allowed is blocked?

                  1 Reply Last reply Reply Quote 0
                  • O
                    oren1031
                    last edited by Jul 12, 2021, 6:24 PM

                    what is the downside? of using it the way i do?
                    keeping in mind i have i3 with 8 gig ram. so its not really
                    working that hard.. its a home environment.

                    J 1 Reply Last reply Jul 12, 2021, 6:49 PM Reply Quote 0
                    • J
                      johnpoz LAYER 8 Global Moderator @oren1031
                      last edited by Jul 12, 2021, 6:49 PM

                      What trying to load every known IP on the planet to put in a list so you can block it? When ALL ips are blocked by default anyway ;)

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • O
                        oren1031
                        last edited by Jul 12, 2021, 6:51 PM

                        ill try what you offer it is more logic. i was not aware that it block by default.
                        also i like the picture :)

                        1 Reply Last reply Reply Quote 0
                        21 out of 22
                        • First post
                          21/22
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                          This community forum collects and processes your personal information.
                          consent.not_received