search

WaterByWind / edgeos-bl-mgmt

Automated updating of EdgeOS firewall network-group to be used as source address blacklist
MIT License
196 stars 40 forks source link

Firewall Policies configuration #21

Open infotechjrf opened 3 years ago

infotechjrf commented 3 years ago

Hi,

Do we need to actually specify which "Interfaces" for this Firewall Blocklist filtering method to apply?

Thanks for your help, JR

FirewallPolicies

hkrob commented 2 years ago

Did you ever find the answer to this? According to what I have read, it appears EdgeRouters need the interface to be set in order for rules to operate...

WaterByWind commented 2 years ago

The list would be used in a specific rule, which would be part of a policy (ruleset).

You define where you want each policy to apply by assigning it to a given direction on a given interface. The same policy may be used on multiple interfaces if appropriate.

For instance you should already have a policy applied to the 'in' direction of your WAN interface. You would add a rule to that existing policy to use the lists here.

hkrob commented 2 years ago

The list would be used in a specific rule, which would be part of a policy (ruleset).

You define where you want each policy to apply by assigning it to a given direction on a given interface. The same policy may be used on multiple interfaces if appropriate.

For instance you should already have a policy applied to the 'in' direction of your WAN interface. You would add a rule to that existing policy to use the lists here.

Thanks, yes this matches what I confirmed through testing. Might be worth making a note of this on the instructions page as some people may be under the incorrect assumption they are being protected after following all the steps on the main page. Many thanks for the guide, script and response here! Happy holidays