Control traffic originating from pfSense host
-
How to control traffic originating from pfSense host?
Example: allow pfSense host to connect only to Internet for NTP and DNS servers, and nothing else.
Firewall rules apply to traffic entering a given pfSense host interface.
Traffic originating from pfSense host itself exits, not enters, interface on pfSense host.
-
In 1.2.3 you cannot do this.
In 2.0, you can control this via floating rules.
Why do you need to lock down traffic leaving the firewall?
-
I want to lock down traffic leaving firewall for same reasons as for all other network devices.
Block all and allow only what is required. And allow-and-log rules to monitor traffic and access with firewall.
Thank you for responding. I will look at 2.0 and floating rules.
