How can I create an explicit rule for related traffic?
-
I have a WAN interface
block
rule that affecting related states/return traffic of another rule LAN interfacepass
rule.So, I want to create a rule to accept related states like it does for the rest of the rules. I think I need to access what pfSense abstracts;
pf
. Am I right? Can it be done??Alternatively, I know rule tagging/marking doesn't leave the firewall, but is it able to recognize return traffic to match it?
I also have static outbound NAT, and the block rule is a geographic rule, so I'm kind of thinking it's possible that since the matching potential is so large, I've exhausted the states allowed per rule/host/something thus it's blocking legitimate traffic. Ballpark?
I just realized by related I should've said established traffic. Sorry about that. :/
-
Well, as unsolicited traffic on WAN is blocked by default, I am assuming you are trying to block return traffic that matches something- IPs in geographic regions? As it's return traffic that you are trying to block, isn't it better to block it on the LAN side, traffic going out TO somewhere you don't want, as opposed to letting the user reach that IP, and then have that return traffic blocked. Maybe I am not sure of what you are trying to do, you allow the traffic OUT then stop it on the way back...