How to find the rule that blocks given IP

[markster]

I have many rules on my pfsense and mostly blocking certain countries. These rules have been created using URL Tables.
Sometimes I encounter a problem where IP is blocked and I want to find out which rule is doing that.
Is there a better way than manually looking at the rules and trying to find that IP?
For example, all rules are lists and if ther are stored in one folder on pfsense I could just use grep.

[mcury]

@markster said in How to find the rule that blocks given IP:

Is there a better way than manually looking at the rules and trying to find that IP?

https://forum.netgate.com/post/91660

[markster]

@markster
I have found out that all alias tables are stored in /var/db/aliastables directory. So basically you can run a grep command to find out if any of the files contain IP you are looking for.
Simple.

[johnpoz]

@markster huh? Firewall log lists the rule that blocked, if your logging the rule.. Are you not logging your block rules?

[markster]

@johnpoz
I do not log block rules. Good point.