OPNsense Forum

Archive => 22.7 Legacy Series => Topic started by: swILeZBa on January 21, 2023, 09:48:59 am

Title: [SOLVED]How long does it take for a FW rule change to take effect after applying
Post by: swILeZBa on January 21, 2023, 09:48:59 am
As per the title.
I see videos where they change a FW rule and then proceed to see its effects immediately, however my experience hasn't been the same. I normally change the rules press apply changes and it doesn't seem to have an effect before some time passes.
How long does it take before the changes are actually effective?

Thanks for any help.
S
Title: Re: How long does it take for a FWrule change to take effect after applying it?
Post by: Patrick M. Hausen on January 21, 2023, 09:52:43 am
The rules are effective immediately. However established connections that e.g. were allowed and are now supposed to be denied, will continue to work because OPNsense is a stateful firewall. You would need to clear the state table in this case.
Title: Re: How long does it take for a FWrule change to take effect after applying it?
Post by: tiermutter on January 21, 2023, 09:53:56 am
Changing rules from block to allow should be applied immediately, changing from allow to block requires resetting the states as allowed traffic remains allowed until the states are expired or killed.
Title: Re: How long does it take for a FWrule change to take effect after applying it?
Post by: swILeZBa on January 21, 2023, 05:39:13 pm
The rules are effective immediately. However established connections that e.g. were allowed and are now supposed to be denied, will continue to work because OPNsense is a stateful firewall. You would need to clear the state table in this case.
Changing rules from block to allow should be applied immediately, changing from allow to block requires resetting the states as allowed traffic remains allowed until the states are expired or killed.
Thank you very much for the helpful explanations.