Firewall rule suddenly bocking broadcasts



  • Firewall URL alias on LAN interface after about a week starts blocking broadcast (255.255.255.255)

    URL Alias containing https://www.Team-CYMRU.org/Services/Bogons/fullbogons-ipv4.txt
    with private address space 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 removed.

    LAN Rule
    src: any : any
    dst: Bogons_IPv4 : any
    action: Block & Log

    Had been working fine for months.  Now after about a week of uptime it starts  blocking src: 192.168.2.9 dst: 255.255.255.255.

    Reboot about a week ago fixed it, but now it's happening again.
    Any ideas why the rule would suddenly start blocking broadcasts?
    Any ideas for troubleshooting?

    Thanks


  • Banned

    Ugh. There's /etc/bogons{,v6} integrated with pfSense updating and the private space removed. You can use that with pfBNG.

    Ideas for troubleshooting: Fix it yourself, noone knowns what you did.


  • LAYER 8 Global Moderator

    my question would be why would you have bogon on a lan interface??  How many hits do get with your clients trying to go to bogon networks - that don't route on the internet anyway.. So how exactly would they get anywhere?  Only if they were on your isp would there be any chance of going to a bogon IP.

    There really is not point to blocking those on lan interface..


Log in to reply