Grouping LAN users
-
hi friends :),
i am new to pfsense. i need to block the internet access to the users. is there any possibilities to group the LAN users by IP? -
Off cause you can, assumed your user have no control over their IP. Just split the IP range up to small subnets for the groups and use these in firewall rules.
If users get their IPs from DHCP you have to configure static mappings, so you have to know thier MACs.
-
thanks for the quick reply.. shall i use aliases?
-
If you like. It can make your rules a little easier to understand.
-
aliases don't make it easier to understand if you ask me.. I would rather see the IP(s) be it source or dest.. actual IP is crystal clear!! aliases mean you have to validate is machine X in that alias, if using name in the alias did it actually resolve to that IP, etc.
-
…if your cursor touches the alias... you see the IPs included ;-) I think that's pretty cool...
-
Which is hard to see in a screen shot with lots of rules.. And can get annoying as hell when your moving your mouse about.
-
It would be nice to have a rules view with all aliases expanded.
