OPNsense Forum

English Forums => General Discussion => Topic started by: Peter847 on April 10, 2021, 03:05:08 PM

Title: Firewall Rule Processing
Post by: Peter847 on April 10, 2021, 03:05:08 PM
I have a question on how the firewall rules are executed. 

I use a NAT Port Forward to redirect DNS requests from selected devices (using an alias) on my LAN to an external server of my choice.  That automatically creates a firewall rule to pass the traffic to the external server.  I also want to setup a failover group but leave those devices using the default WAN0, so I have another firewall rule to pass traffic from those devices to WAN0 gateway.  I cannot combine those two rules as I cannot edit the rule linked to the NAT Port Forward.

If I set "Quick" only on the last rule, will both of those rules be executed on a match?
Title: Re: Firewall Rule Processing
Post by: Greelan on April 10, 2021, 11:02:10 PM
No to the last question. But you can disable the automatic firewall rule creation on the port forward (set Filter rule association to None) and then just set up a single manual rule as you want it
Title: Re: Firewall Rule Processing
Post by: Peter847 on April 11, 2021, 05:11:48 PM
Many thanks, I will try that.