Feature #15239
closedAdd to existing rule
0%
Description
First i acknowledge that i do know i can create an alias and group IPs or Ports..
Feature: The ability to add to a rule. There are times such as today in my use case where i need to add another port to an existing rule. My options are to either
1. Clone the rule
2. Create an alias
I would like to simply add another port to the rule. But this could be with anything else such as add another IP or Network to an existing rule. This is somewhat of a common feature among firewalls so im hoping there is a way to build it within pfSense.
Also maybe not modify an existing rule. What about a new rule and i am able to put multiple networks in that rule. Not unusual to do so as not everyone would want to create an alias
Updated by Jim Pingle over 1 year ago
- Category changed from Configuration Upgrade to Rules / NAT
- Status changed from New to Rejected
If the ports are together you can already use a range. If the ports are separate you have to use an alias. If the IP addresses align right you can change them to a CIDR masked subnet definition instead of a single address. If they are not next to each other or the CIDR math doesn't work out, they have to be in an alias.
Attempting to accommodate multiple entries inside a rule would add a ton of complexity and technical debt for no real benefit. Aliases are the solution.