OPNsense Forum

Archive => 21.7 Legacy Series => Topic started by: eponymous on October 02, 2021, 07:25:45 PM

Title: [SOLVED] Determine which interfaces the floating rules apply to?
Post by: eponymous on October 02, 2021, 07:25:45 PM
Hi,

I made some LAN-side port forwards to force redirection of all DNS and NTP to my own internal LAN servers. So for example, any NTP. requests to external servers will be redirected to my internal NTP server.

When these port forwards were created, they auto added floating firewall rules. I'm pretty sure I read in a post by Franco that it will only apply those floating rules to the required interfaces as defined by the port forward rule, meaning it shouldn't be opening up ports on the WAN interface, just LAN.

Is there any way I can list these interfaces - GUI or command line? I have a lot of floating rules and I need to check to which interfaces they apply.

I'd also like to view the interfaces for the hidden/auto-added floating rules for things like CARP etc.

Thanks.
Title: Re: Determine which interfaces the floating rules apply to?
Post by: Fright on October 02, 2021, 09:18:04 PM
hi
QuoteIs there any way I can list these interfaces - GUI or command line?
Firewall: Diagnostics: pfInfo -> Rules
pfctl -vvsr
Title: Re: Determine which interfaces the floating rules apply to?
Post by: eponymous on October 03, 2021, 05:02:27 PM
Quote from: Fright on October 02, 2021, 09:18:04 PM
hi
QuoteIs there any way I can list these interfaces - GUI or command line?
Firewall: Diagnostics: pfInfo -> Rules
pfctl -vvsr

Thanks! That's exactly what I was looking for.