OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: Wuensch-AG-Adm on February 23, 2026, 03:26:00 PM

Title: OPNSense 25.10.2_1 Problem with the button for activating/deactivating the rule
Post by: Wuensch-AG-Adm on February 23, 2026, 03:26:00 PM
Dear community,
I am trying to disable the rules (the manual part) in order to set up the rules using policies only, but when I select all entries (or 1000/500/200) and click the "Disable" button, the waiting circle appears, and when it is finished, nothing happens; the checkboxes are not empty.
Is this a known bug or something similar? Because it's crazy to manually deactivate about 30,000 entries.
Thank you in advance for your help.
Best regards,
Joel.
Title: Re: OPNSense 25.10.2_1 Problem with the button for activating/deactivating the rule
Post by: max1987martin on March 11, 2026, 07:46:03 AM
Quote from: Wuensch-AG-Adm on February 23, 2026, 03:26:00 PMDear community,
I am trying to disable the rules (the manual part) to set up the rules using policies only, but when I select all entries (or 1000/500/200) and click the "Disable" button, the waiting circle appears, and when it is finished, nothing happens; the checkboxes are not empty. mcdvoice (https://www.mcdvoice.site)
Is this a known bug or something similar? Because it's crazy to manually deactivate about 30,000 entries.
Thank you in advance for your help.
Best regards,
Joel.

Hello,

Instead of disabling 30k rules manually, you should control them via IDS/IPS Policy settings.

Steps

Go to
Services → Intrusion Detection → Policies
Create or edit a policy.
Configure:
Rulesets: leave empty or select desired rulesets
Action: set to
disabled (to disable all rules)
or alert / drop depending on your setup.
Apply the policy to the interface.
Policies override individual rule states, so you do not need to manually disable rules.


Best Regard,
Max Martin


Title: Re: OPNSense 25.10.2_1 Problem with the button for activating/deactivating the rule
Post by: Wuensch-AG-Adm on March 13, 2026, 08:11:03 AM
Quote from: max1987martin on March 11, 2026, 07:46:03 AM
Quote from: Wuensch-AG-Adm on February 23, 2026, 03:26:00 PMDear community,
I am trying to disable the rules (the manual part) in order to set up the rules using policies only, but when I select all entries (or 1000/500/200) and click the "Disable" button, the waiting circle appears, and when it is finished, nothing happens; the checkboxes are not empty.
Is this a known bug or something similar? Because it's crazy to manually deactivate about 30,000 entries.
Thank you in advance for your help.
Best regards,
Joel.

Hello,

Instead of disabling 30k rules manually, you should control them via IDS/IPS Policy settings.

Steps

Go to
Services → Intrusion Detection → Policies
Create or edit a policy.
Configure:
Rulesets: leave empty or select desired rulesets
Action: set to
disabled (to disable all rules)
or alert / drop depending on your setup.
Apply the policy to the interface.
Policies override individual rule states, so you do not need to manually disable rules.




Hi,
I have already done that, but I still get the message that some rules need to be activated manually, even though I am using the policies.
I don't know why.
Regards,
Joel