Does it matter which interface tab I put my rules in?



  • One thing that is confusing me about pfSense:

    I have three interfaces:  LAN, WAN and DMZ and thus three rule tabs, one tab for each interface.

    When I create a new rule in any of the three tabs, it gives me the option to choose which interface I want to make a rule for… even though it seems that would be implied based off of which tab I was  working with already.

    So my question is, does it really matter where the rules go?  Are the tabs there simply to help you organize?  If I create a rule for the DMZ interface in the LAN tab, does that matter?  Does it make a difference if it was in the LAN tab instead of the DMZ tab?

    Just a little bit confusing from an interface standpoint of view.  So hopefully someone can clear it up for me.  I have a feeling that it doesn't matter which tab the rules are in, but I just want to make sure.


  • Rebel Alliance Developer Netgate

    It does matter. Changing that drop-down moves the rule to the tab for the interface you choose. Letting you pick the interface is an easy way to clone or move a rule to other interfaces.

    Rules are processed as a packet enters the interface chosen for the rule, and they are evaluated in a top-down manner.



  • @jimp:

    It does matter. Changing that drop-down moves the rule to the tab for the interface you choose. Letting you pick the interface is an easy way to clone or move a rule to other interfaces.

    Rules are processed as a packet enters the interface chosen for the rule, and they are evaluated in a top-down manner.

    That makes sense. Thanks!



  • The only difference when clicking the add button on different tabs is which interface is selected by default.  When you select a different interface on the rule you are adding, it will appear on the tab for that interface, not the interface you clicked the add or edit button under.


Log in to reply