Project

General

Profile

Actions
Copy link

Feature #13124

closed
CR JP

Option to wait for interface selection before displaying firewall rules

Feature #13124: Option to wait for interface selection before displaying firewall rules

Added by Chris Rowe over 4 years ago. Updated almost 3 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Jim Pingle
Category:
Rules / NAT
Target version:
2.7.1
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
23.09
Release Notes:
Default

Description

The default behaviour of firewall_rules.php is to load all firewall rules on the WAN interface if no interface has been previously selected. When a large number of WAN side port forwards/firewall rules, etc exist, loading these rules can put a lot of load on the firewall. On a sufficiently loaded firewall this can actually impact packet forwarding, sometimes leading to packet loss.

It would be good to have an option similar to what exists for viewing state table entries(https://github.com/pfsense/pfsense/commit/88081ea257fa683ed28b588c4c35260589604741), requiring the interface to be set before loading the firewall entries.

I've already added a pull request with this feature https://github.com/pfsense/pfsense/pull/4582

JP Updated by Jim Pingle over 4 years ago Actions
Copy link
 #1

  • Target version set to 2.7.0
  • Plus Target Version set to 22.05

JP Updated by Jim Pingle over 4 years ago Actions
Copy link
 #2

  • Status changed from New to Pull Request Review

JP Updated by Jim Pingle over 4 years ago Actions
Copy link
 #3

  • Plus Target Version changed from 22.05 to 22.09

Move this ahead since it's a bit late to get in new features with a potentially high impact.

JP Updated by Jim Pingle about 4 years ago Actions
Copy link
 #4

  • Plus Target Version changed from 22.09 to 22.11

JP Updated by Jim Pingle almost 4 years ago Actions
Copy link
 #5

  • Plus Target Version changed from 22.11 to 23.01

JP Updated by Jim Pingle almost 4 years ago Actions
Copy link
 #6

  • Plus Target Version changed from 23.01 to 23.05

JP Updated by Jim Pingle over 3 years ago Actions
Copy link
 #7

  • Plus Target Version changed from 23.05 to 23.09

JP Updated by Jim Pingle over 3 years ago Actions
Copy link
 #8

  • Assignee set to Jim Pingle

MM Updated by Marcos M about 3 years ago Actions
Copy link
 #9

  • Target version changed from 2.7.0 to CE-Next

JP Updated by Jim Pingle about 3 years ago Actions
Copy link
 #10

  • Category changed from Web Interface to Rules / NAT
  • Status changed from Pull Request Review to In Progress
  • Target version changed from CE-Next to 2.8.0

JP Updated by Jim Pingle about 3 years ago Actions
Copy link
 #11

  • Status changed from In Progress to Feedback
  • % Done changed from 0 to 100

Applied in changeset commit:c451853836ae3e00ec20aa666c64a198d08b402c.

CL Updated by Chris Linstruth about 3 years ago Actions
Copy link
 #12

Tested on:

23.09-DEVELOPMENT (amd64)
built on Sat Aug 26 17:37:15 UTC 2023
FreeBSD 14.0-ALPHA2

Looks good.

JP Updated by Jim Pingle about 3 years ago Actions
Copy link
 #13

  • Status changed from Feedback to Resolved

JP Updated by Jim Pingle almost 3 years ago Actions
Copy link
 #14

  • Target version changed from 2.8.0 to 2.7.1
Actions
Copy link

Also available in: Atom