Firewall rule order is being changed every reboot.
-
So, we have a fancy network printer/scanner at one job site. The scanner is configured to send scans as PDF files to the users via email. In order to block worms or any other potential invaders from sending emails, we have a pass rule for only that scanner's IP, followed by a blanket block rule for SMTP for all internal IPs. A few other rules that follow this pattern are in there also. That works fine, except after every reboot, all block rules float to the top of the list. They were all where I wanted them before the reboot, but not after.
This is on a Netgate 4200 running PFSense+ 24.11 .
I also have a 4200 at my home office, but I don't have this issue.
I had to completely disable the block rules at that office so that I don't get phone calls every time the power company shuts off the power. They are near some wooded hills in So. Cal., so on a hot dry day, the power goes out to the neighborhood as a preventative measure.
Is this a known issue, and if so, is there a working fix?
-
@aaronouthier There was a bug in 24.3/11 where deleting multiple rules would reorder them. There’s a patch.
But otherwise no it’s not normal at a reboot. Maybe compare config files before and after?