<![CDATA[Howto: Block static IP?]]>Hi,

I'm new in pfsense. And I'd like to know how to make rules to firewall for blocking lan IP addresses, like example 192.168.0.5.
What I mean is that, when someone choose to his computer static IP like 192.168.0.5 then he/she can't use worldwide internet over that IP.

Thank you!

]]>https://forum.netgate.com/topic/19892/howto-block-static-ipRSS for NodeSun, 12 Jul 2026 09:13:00 GMTSun, 13 Dec 2009 19:40:22 GMT60<![CDATA[Reply to Howto: Block static IP? on Mon, 14 Dec 2009 09:50:59 GMT]]>Ah yes there is only /31 available.
But this is only if you select in the drop-down "network".
You can select "Single host or alias".
With that you can specify a single IP.

]]>https://forum.netgate.com/post/216100https://forum.netgate.com/post/216100Mon, 14 Dec 2009 09:50:59 GMT<![CDATA[Reply to Howto: Block static IP? on Mon, 14 Dec 2009 09:44:12 GMT]]>Ahhh yes! Thank You! That was the problem. It must be before allow rule! And I put subnet mask 31 because there isn't choice 32. It's working!

]]>https://forum.netgate.com/post/216099https://forum.netgate.com/post/216099Mon, 14 Dec 2009 09:44:12 GMT<![CDATA[Reply to Howto: Block static IP? on Mon, 14 Dec 2009 09:33:53 GMT]]>Yes this wont work because the block rule has to be above the allow rule.
Also if you want to block a single IP you need to have as subnet /32.
With /24 you block the whole subnet.

]]>https://forum.netgate.com/post/216098https://forum.netgate.com/post/216098Mon, 14 Dec 2009 09:33:53 GMT<![CDATA[Reply to Howto: Block static IP? on Mon, 14 Dec 2009 09:32:45 GMT]]>I made a picture of my rule. I think there is something wrong - it won't work. :(

]]>https://forum.netgate.com/post/216097https://forum.netgate.com/post/216097Mon, 14 Dec 2009 09:32:45 GMT<![CDATA[Reply to Howto: Block static IP? on Mon, 14 Dec 2009 07:12:20 GMT]]>Just create a block rule for this IP above your allow rule.

]]>https://forum.netgate.com/post/216076https://forum.netgate.com/post/216076Mon, 14 Dec 2009 07:12:20 GMT