Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    PF Tables & pfSense ??

    Firewalling
    3
    4
    4116
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      blocker last edited by

      Are there any plans to integrate PF tables in pfSense? (see http://www.openbsd.org/faq/pf/tables.html)

      For those that aren't familiar with PF's built-in tables feature..

      "A table is used to hold a group of IPv4 and/or IPv6 addresses. Lookups against a table are very fast and consume less memory and processor time than lists. For this reason, a table is ideal for holding a large group of addresses as the lookup time on a table holding 50,000 addresses is only slightly more than for one holding 50 addresses."

      I've used this extensively in *BSD – it works well. This would be a big improvement in pfSense, as the UI for massive amounts of block rules (i.e. blacklisting much of AP/AFRNIC) quickly clutters in the firewall rules section -- let alone the perfomance increase that is gained.

      1 Reply Last reply Reply Quote 0
      • GruensFroeschli
        GruensFroeschli last edited by

        Something else then "Firewall –> Aliases" ?

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • B
          blocker last edited by

          @GruensFroeschli:

          Something else then "Firewall –> Aliases" ?

          Yes, something very different.

          Please read the PF documentation, namely the section on PF Tables as I linked above to digest this core feature of PF.

          1 Reply Last reply Reply Quote 0
          • J
            JWU42 last edited by

            If you run

            pfctl -vvs Tables
            

            in the Diagnostics…Command Prompt you will see pfSense is using tables.  Now having better functionality so you can add your own would be nice.  I too come from OBSD...

            Aliases is an option, but better table support is the "right" way to do it  ;)

            1 Reply Last reply Reply Quote 0
            • First post
              Last post