[solved] pfblockerNG: what does the "permit both"-country-roule allow?
-
As I have seen after generating an automatic roule-set, pfblockerNG puts an "allow"-rule in the WAN-interface on top of the list if you add a country in pfblockerNG with the list action "permit both". An online security check I have made afterwards states ports 22, 80 and 443 are no open!
Does that mean that incoming traffic from this permitted country can "make all", i.e. the firewall is completely disabled for IPs of that country?
-
Anyone?
-
You will need to create NAT rules to open up those ports also. Once that is done, any of the IPs in your Permit Alias will be allowed to access those open ports unsolicited.
-
In NAT, Pfsense by default activated the option "Automatic outbound NAT rule generation", with LAN to any and any port to any port. I did not change this option.
So this does mean that ports 22, 80 and 443 were completely open with the pfblockerNG-permit-rule I described above, right?
-
In NAT, Pfsense by default activated the option "Automatic outbound NAT rule generation", with LAN to any and any port to any port. I did not change this option.
So this does mean that ports 22, 80 and 443 were completely open with the pfblockerNG-permit-rule I described above, right?
When creating the NAT Rule, don't auto-create the Firewall rule. Leave that part to the pfBlockerNG package to create. If you let it auto-create, those ports will be wide open to the internet as they are "any" "any".
-
ok. thanks for the confirmation, although I think that default behaviour (e.g. auto-creating of "wide-open"-NAT-roules) should be changed.
