PfBlocker with BGP and dual wan
-
So we have a block of IPs that route through BGP through 2 ISPs
i have installed and enabled pfblocker on many firewalls, but not in a situation like this, and well now the issue is the reports feed of what is getting blocked is going crazy with blocking things hitting the bgp IPs from an unknown feed, despite having no feeds enabled or any blocking.
Now every single IP is malicious, legit traffic is not blocked as far as i can tell, and all of them are accessing ports that are opened.
we block everything by default, then allow traffic through NAT rules that end up on gw_group, and then traffic load balanced between either WAN1 or WAN2
i have also tested by adding my IP to pfblocker however it does not block me from accessing things.
here is the report of ips being blocked
on the IP inbound it is our 2 wans
on the outbound, iti s all our BGP IPs
here is a picture of another firewall where all rules it is completely normal
would think it would be as simple as select gw_group wan1 and 2 as the outbound, but there is no option for it
