Log only rule

[thorolason]

Is it possible to make a log only rule? i.e. a rule where I don't take decision on passing or blocking the traffic.

The reason for this is that I use aliases extensively and my firewall rules are usually service based.
Therefore logging a specific host temporary is not that trivial.

Cheers / Thor

[stephenw10]

If you use a floating rule you can choose 'match' instead of pass or block.
https://doc.pfsense.org/index.php/What_are_Floating_Rules

Steve

Edit: This should probably be moved to a different section.

[thorolason]

excellent, thank you, exactly what I was wanting