Project

General

Profile

Actions

Feature #15239

closed

Add to existing rule

Added by Mike Moore over 1 year ago. Updated over 1 year ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
Rules / NAT
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Release Notes:
Default

Description

First i acknowledge that i do know i can create an alias and group IPs or Ports..

Feature: The ability to add to a rule. There are times such as today in my use case where i need to add another port to an existing rule. My options are to either
1. Clone the rule
2. Create an alias

I would like to simply add another port to the rule. But this could be with anything else such as add another IP or Network to an existing rule. This is somewhat of a common feature among firewalls so im hoping there is a way to build it within pfSense.

Also maybe not modify an existing rule. What about a new rule and i am able to put multiple networks in that rule. Not unusual to do so as not everyone would want to create an alias

Actions #1

Updated by Jim Pingle over 1 year ago

  • Category changed from Configuration Upgrade to Rules / NAT
  • Status changed from New to Rejected

If the ports are together you can already use a range. If the ports are separate you have to use an alias. If the IP addresses align right you can change them to a CIDR masked subnet definition instead of a single address. If they are not next to each other or the CIDR math doesn't work out, they have to be in an alias.

Attempting to accommodate multiple entries inside a rule would add a ton of complexity and technical debt for no real benefit. Aliases are the solution.

Actions #2

Updated by Mike Moore over 1 year ago

Understood. Thanks for clarifying.

Actions

Also available in: Atom PDF