OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: spetrillo on June 29, 2026, 12:55:52 AM

Title: Policy Editor?
Post by: spetrillo on June 29, 2026, 12:55:52 AM
The following shows up when I access web GUI from my phone. It does not show up when I access from my Linux desktop:

We strongly advise to use policies instead of single rule based changes to limit the size of the configuration. A list of all manual changes can be revised in the policy editor (available here)

Is there doc on using the policy editor?

Steve
Title: Re: Policy Editor?
Post by: spetrillo on August 18, 2026, 10:12:03 PM
Coming back to this. Does anyone know how to do policies?
Title: Re: Policy Editor?
Post by: patient0 on August 19, 2026, 08:50:54 AM
Quote from: spetrillo on August 18, 2026, 10:12:03 PMComing back to this. Does anyone know how to do policies?
Can you provide a screenshot? That wording doesn't ring a bell at all. What phone and browser on the phone are you using?
Title: Re: Policy Editor?
Post by: Seimus on August 19, 2026, 09:53:44 AM
What is a policy for you?

For me a policy is basically the group feature, and zone is the specific interface.

Groups allows you to pair together interfaces that will inherit the same rules from the particular Group or groups.

Regards,
S.
Title: Re: Policy Editor?
Post by: OPNenthu on August 19, 2026, 10:16:33 AM
Got curious as I'd never seen a 'policy editor' UI.

That text seems related to IDS:

https://github.com/opnsense/core/blob/e5f01510072b2602cfe215fbb0d51cda33999035/src/opnsense/mvc/app/controllers/OPNsense/IDS/Api/SettingsController.php#L741

It links to /ui/ids/policy#rules and I guess triggers if rule count > 100.

Makes sense why I never saw this before as I'm not running IDS.  OP was right to post in this section but the 'policy' wording is ambiguous and made me also think 'pf' rules :P