Project

General

Profile

Actions

Feature #12665

open

Ability to add custom pf rules from the GUI

Added by Andrew - almost 3 years ago. Updated almost 3 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
Rules / NAT
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Default

Description

I'd be grateful if you could please consider adding the ability to specify custom pf rules from the GUI.

I'm envisaging a plain text field that the user can enter custom pf rules, which would then be appended by filter.inc on a filter reload.

There are occasions where custom pf rules are useful, in particular the "dup to" rule for selectively mirroring traffic.

See for example: https://forum.netgate.com/topic/163466/how-to-add-pf-dup-to-rules

At the moment it can be done by manually editing tmp/rules.debug or by editing filter.inc to add the custom rules (see https://docs.netgate.com/pfsense/en/latest/firewall/pf-ruleset.htm).

However, in the first case, the custom rules don't persist after a filter reload, and in the second case they won't persist after upgrading pfSense. It would therefore be helpful to have the feature in the GUI.

Thank you.

Actions

Also available in: Atom PDF