Project

General

Profile

Actions

Bug #2367

open

display negate rules in firewall_rules.php and evaluate when added

Added by Chris Buechler almost 12 years ago. Updated almost 12 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
Rules / NAT
Target version:
-
Start date:
04/10/2012
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:

Description

the fact the negate policy routing rule isn't shown is bad as it has lead to unintended consequences (ends up passing traffic people don't realize is passed because it's hidden). They should be shown as a grayed out auto-added rule, similar to block private/bogon.

Also need to look at when and how that rule is automatically added. In some circumstances it can allow more traffic than the user intends, such as:
http://forum.pfsense.org/index.php/topic,48143.0/topicseen.html

Actions

Also available in: Atom PDF