Firewall rules whit more than one source and no alias



  • Hello,

    I am curentely begin install a pfsense firwall in my enterprise.
    We have a lot of rules and I would like to make some rules whit multi alias without making an alias of an alias …

    Like this :
    FROM : (ALIAS1 & ALIAS2 & ALIAS3), TO: (ALIAS5 & ALIAS6), ALLOW TCP (PORT_ALIAS1)

    Thanks



  • I guess you have 6 rules for this now:
    FROM : (ALIAS1), TO: (ALIAS5), ALLOW TCP (PORT_ALIAS1)
    FROM : (ALIAS1), TO: (ALIAS6), ALLOW TCP (PORT_ALIAS1)
    FROM : (ALIAS2), TO: (ALIAS5), ALLOW TCP (PORT_ALIAS1)
    FROM : (ALIAS2), TO: (ALIAS6), ALLOW TCP (PORT_ALIAS1)
    FROM : (ALIAS3), TO: (ALIAS5), ALLOW TCP (PORT_ALIAS1)
    FROM : (ALIAS3), TO: (ALIAS6), ALLOW TCP (PORT_ALIAS1)

    As far as I am aware, you can only put 1 alias in each source/destination field of a rule. So you need to make an aliases that contain other aliases. That works, and I would hhave thought with some good naming conventions for your aliases it should make the rule list readable by mere mortals.



  • OK, that's why I thought. This is a regression before our previous FW but all other stuff on pfsense make this nothing.

    Thanks you.


Log in to reply