How to find the rule that blocks given IP
-
I have many rules on my pfsense and mostly blocking certain countries. These rules have been created using URL Tables.
Sometimes I encounter a problem where IP is blocked and I want to find out which rule is doing that.
Is there a better way than manually looking at the rules and trying to find that IP?
For example, all rules are lists and if ther are stored in one folder on pfsense I could just use grep. -
@markster said in How to find the rule that blocks given IP:
Is there a better way than manually looking at the rules and trying to find that IP?
-
@markster
I have found out that all alias tables are stored in /var/db/aliastables directory. So basically you can run a grep command to find out if any of the files contain IP you are looking for.
Simple. -
@markster huh? Firewall log lists the rule that blocked, if your logging the rule.. Are you not logging your block rules?
-
@johnpoz
I do not log block rules. Good point.
