crowdsecurity / cs-firewall-bouncer

Crowdsec bouncer written in golang for firewalls
MIT License
103 stars 41 forks source link

PF feedback (opnsense) #308

Open LaurenceJJones opened 1 year ago

LaurenceJJones commented 1 year ago

"Don't generate Rules" -- this would allow to add a selfdefined rule to the interface of your liking, usually WAN only. At the moment, we get a floating rule for all interfaces, which isn't very optimal since i have a lot of vlan communication between interfaces. Opnsense is the router for all networks

Adding as an issue so user can track the outcome

mmetc commented 1 year ago

In the pfsense plugin, we create the ipv4/ipv6 rules (which are not editable nor shown in the interface) but they can be disabled. The user is free to add their own.

Screenshot from 2023-08-21 10-51-07

Is this enough if we do the same for opnsense? I understand an explicit selection of the interface would be preferable, we would need to see how this translates in both opnsense and pfsense

LaurenceJJones commented 1 year ago

@Ramalama2