Howto: Block static IP?



  • Hi,

    I'm new in pfsense. And I'd like to know how to make rules to firewall for blocking lan IP addresses, like example 192.168.0.5.
    What I mean is that, when someone choose to his computer static IP like 192.168.0.5 then he/she can't use worldwide internet over that IP.

    Thank you!



  • Just create a block rule for this IP above your allow rule.



  • I made a picture of my rule. I think there is something wrong - it won't work. :(



  • Yes this wont work because the block rule has to be above the allow rule.
    Also if you want to block a single IP you need to have as subnet /32.
    With /24 you block the whole subnet.



  • Ahhh yes! Thank You! That was the problem. It must be before allow rule! And I put subnet mask 31 because there isn't choice 32. It's working!



  • Ah yes there is only /31 available.
    But this is only if you select in the drop-down "network".
    You can select "Single host or alias".
    With that you can specify a single IP.


Log in to reply