Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Firewall Rule Numbers

    Scheduled Pinned Locked Moved Firewalling
    25 Posts 8 Posters 9.4k Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H Offline
      hulleyrob
      last edited by

      I dont suppose you could do the same for UPnP rules as well?

      Thanks

      Rob

      1 Reply Last reply Reply Quote 0
      • S Offline
        snore
        last edited by

        (This is an attempt by me to not clutter up this forum by repeating the same question, but instead information to an already existing thread if that is similar. If I did wrong by doing that I apologize).

        I have the same problem as the OT. I suddenly have blocks in my FW log without descriptions. Clicking on the red cross doesn't show any other information.

        (I do know this happens when you disable logging for a FW rule which was previously enabled, but I did not do such a thing at all).

        Is there a place where I can find all the rule numbers together?

        Log:

        pfs_fw_descriptions01.jpg

        Click red cross:

        pfs_fw_descriptions02.jpg

        Bonus: this description isn't right. MULLVAD is a separate interface, it is not the interface VLAN40:

        pfs_fw_descriptions03.jpg

        Thank you for help 🕺

        1 Reply Last reply Reply Quote 0
        • DerelictD Offline
          Derelict LAYER 8 Netgate
          last edited by

          cat /tmp/rules.debug Look at the tracker.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 1
          • S Offline
            snore
            last edited by

            Thank you. I also discovered
            https://pfsense/status.php

            1 Reply Last reply Reply Quote 0
            • DerelictD Offline
              Derelict LAYER 8 Netgate
              last edited by

              rules.debug is the best place to get the configured rule set all in one place. It is usually one of the first places I go when evaluating a status output, depending on what the trouble is.

              I never look at the rules in the config.xml. rules.debug lays them all out for you in a readable format.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.