Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Added new VLAN - do I need to duplicate pfBlockerNG rule for that interface?

    Scheduled Pinned Locked Moved pfBlockerNG
    5 Posts 3 Posters 382 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      NGUSER6947
      last edited by

      Have been using pfBlockerNG for some time. Awesome enhancement.

      I recently created a new interface and VLAN. Do I now need to duplicate the pfBlockerNG rule (currently on the LAN interface):
      b314c20e-b2b5-47a7-89c3-14fb15287622-image.png

      to the new interface for the VLAN, in order for pfBlockerNG to block malicious stuff, ads, etc. on that interface?

      My assumption would be yes but I want to check before I proceed. Thanks.

      V 1 Reply Last reply Reply Quote 0
      • V
        viragomann @NGUSER6947
        last edited by

        @NGUSER6947
        Go to Firewall > pfBlockerNG > IP and add the new interface in the "Outbound Firewall Rules" box.

        N A 2 Replies Last reply Reply Quote 0
        • N
          NGUSER6947 @viragomann
          last edited by NGUSER6947

          @viragomann Like this correct:
          9791862e-980a-45f4-a94e-2ae78b334275-image.png

          Got it. Thank you.

          1 Reply Last reply Reply Quote 0
          • A
            Antibiotic @viragomann
            last edited by

            @viragomann But if use OpenVPN, do I need also check OpenVPN interface or only LAN should set?

            pfSense plus 24.11 on Topton mini PC
            CPU: Intel N100
            NIC: Intel i-226v 4 pcs
            RAM : 16 GB DDR5
            Disk: 128 GB NVMe
            Brgds, Archi

            V 1 Reply Last reply Reply Quote 0
            • V
              viragomann @Antibiotic
              last edited by

              @Antibiotic
              I assume, you're talking about a VPN service provider to access the internet. So yes, then you have to select your LAN.

              pfBlockerNG adds rules for outbound traffic to the internal interface, e.g. LAN, likewise as you manually can restrict the outbound traffic by rules.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.