OPNsense Forum

Archive => 20.7 Legacy Series => Topic started by: banym on September 16, 2020, 07:30:00 PM

Title: Content of "This Firewall" Alias
Post by: banym on September 16, 2020, 07:30:00 PM
Can I check what "This Firewall" looks like?

Does it contain the IPV6 DHCP wan address?
Title: Re: Content of "This Firewall" Alias
Post by: Fright on September 16, 2020, 09:56:40 PM
yes. can view actual rule in Firewall-diagnostics-pfinfo.
"This firewall" == "self" keyword (means all IPs assigned to interface)
Title: Re: Content of "This Firewall" Alias
Post by: franco on September 17, 2020, 08:43:30 AM
It's a special keyword inside pf matching all configured addresses of the system. It's not an alias that can be inspected as far as I know.


Cheers,
Franco
Title: Re: Content of "This Firewall" Alias
Post by: Fright on September 17, 2020, 08:55:16 AM
actually we can with a little trick )
make advanced alias (eg "self_content"). then
pfctl -t self_content -Tadd {self}
pfctl -t self_content -Tshow
Title: Re: Content of "This Firewall" Alias
Post by: franco on September 17, 2020, 09:48:11 AM
How nifty, thanks! :)