allow list

heliop100

Hi
pfsense 2.7.0-RELEASE
pfblockerNG 3.2.0-6

Allow list are set as permit inbound

pfb_pass/match | pfb_block/reject | pfsense pass/match | pfsense block/reject

trying to open https://http.kali.org/kali/
I put the IP on allow_list, but site still with not connecting error

The IP don't show on pfblockerNG Reports / Block nor on pfsense firewall logs

any idea?

Thanks

michmoor

@heliop100 You have a screen shot of the error you are getting?

heliop100

Yes
Thanks.

michmoor

@heliop100 So you allowedlist ACL is not being hit as you can see with the 0/0 B
Do you see traffic permitted outbound in the firewall logs?
Are you running Squid or Snort/Suricata ?

heliop100

No snort, no surricata, no squid.
The only package are pfblockerNG

no traffic permitted outbound on logs

michmoor

@heliop100 And if you temporarily disable pfBlockerNG do you have access to the site?

heliop100

Will try later.
I have some NAT rules that use alias_permit list

heliop100

With pfblockerNG disable the site opens normally

heliop100

I configured the "Advanced Inbound Firewall Rule Settings" and now its working.
Thanks.