Rules to block access to specific vlan

mark81

Hi,

I'm a little new with pfsense. I configured a few vlans. I now want to block traffic from vlan A to vlan B and only allow it for specific hosts.
I would like to enter those rules on the vlanB interface. However that does not seem to work. What does work is blocking traffic on vlanA or in the floating rules section.

Is there a way to get those rules working in the vlanB rules section?

Kind regards,

Mark

Derelict

In general, rules go on the interface the traffic originates from / enters pfSense on.

https://doc.pfsense.org/index.php/Firewall_Rule_Basics

https://doc.pfsense.org/index.php/Firewall_Rule_Processing_Order

Instead of thinking of it in terms of "What hosts can access VLAN B?" think of it in terms of "What destinations can VLAN A Access?"

You can do it with outbound, floating rules on VLAN B, but that means you are letting the traffic into the firewall them blocking it on the way out.

It is generally more secure to just keep the traffic out of the firewall in the first place. Especially since, once inside, the defaul behavior is to allow it out any interface.

mark81

sorry for the late reply and thanks for the answer, it has been very helpful and I got my pfsense completely up and running.