OPNsense Forum

Archive => 24.1, 24.4 Legacy Series => Topic started by: athisesanr on March 14, 2024, 07:00:17 PM

Title: How to disable packet filter permanently in opnsense
Post by: athisesanr on March 14, 2024, 07:00:17 PM
Hi Folks,

I'm new to Opnsense and am about to check the possibility of permanent pf disability in Opnsense since we are facing issues like every gui change will get my pf enabled and the get manual enable using pfctl -d on the moments.

Thanks,
Athisesan R
Title: Re: How to disable packet filter permanently in opnsense
Post by: Monviech (Cedrik) on March 14, 2024, 07:10:21 PM
FIREWALL: SETTINGS: ADVANCED

Disable Firewall: X
Title: Re: How to disable packet filter permanently in opnsense
Post by: athisesanr on March 14, 2024, 09:11:08 PM
If I disable this option then entire firewall options will be disabled right..!

is there any other way to prevent the manual cli types pfctl -d cmd after every change dones.
Title: Re: How to disable packet filter permanently in opnsense
Post by: Monviech (Cedrik) on March 14, 2024, 09:31:14 PM
The OPNsense uses pf for all packet filtering and NAT. Without pf active, you don't have any firewall. You turn it into a router. Thats what this option does.
Title: Re: How to disable packet filter permanently in opnsense
Post by: Patrick M. Hausen on March 14, 2024, 09:33:49 PM
pfctl -d also disables all firewall functions. That option in the UI does pfctl -d, only permanently.