OPNsense Forum

English Forums => General Discussion => Topic started by: verfluchten on May 11, 2025, 09:02:42 PM

Title: [SOLVED] Firewall rules based on FQDN
Post by: verfluchten on May 11, 2025, 09:02:42 PM
There was an archived topic here in which someone asked how to create them, and the answer was to create a URL(s) type alias and to reference it in a rule.
I tried to do that and created an alias that includes deb.debian.org, ftp.debian.org, and security.debian.org. Then I added a Pass rule and referenced the alias in its destination, port 80.

But the source host still cannot connect to the 3x FQDNs above due to a Block rule that follows right next to the above Pass rule.

Tried http://deb.debian.org/* as content as well, hoping that wildcards are supported, but it did not work either.

What am I doing wrong?
Title: Re: Firewall rules based on FQDN
Post by: verfluchten on May 11, 2025, 09:13:20 PM
Quote from: verfluchten on May 11, 2025, 09:02:42 PMWhat am I doing wrong?

Using URL(s) was wrong. It should have been Host(s).
Then Diagnostics->Alias resolves, and the rule works.