OPNsense Forum

Archive => 18.7 Legacy Series => Topic started by: katamadone [CH] on September 25, 2018, 11:33:40 am

Title: Aliases - Documentation (URL / URL Table)
Post by: katamadone [CH] on September 25, 2018, 11:33:40 am
Hi there,

I just saw some differences between documentation on opnsense.org / opnsense fw itself and available options when creating aliases.

In "Alias Edit" you got the possibilities Hosts, Networks, Ports, URL (IPs), URL Table (IPs), GeoIP, External.
The description below lists only  Hosts, Networks, Ports, URLs, GeoIP, External - so no URL Table
The documentation at https://wiki.opnsense.org/manual/aliases.html lists only Hosts, Networks, Ports, URL Tables, GeoIP

Whats the difference between URL / URL Table? In the GUI only at URL Table an "Alias Expiration" can be provided (days + hours). This is stated on Documentation at https://docs.opnsense.org/manual/how-tos/edrop.html

And another question: When https://docs.opnsense.org/manual/how-tos/edrop.html mentions that "update frequency 1" means "for each day" with the explanation of  (days + hours) at alias edit view. Do i have to enter "0 1" to update every hour?
Title: Re: Aliases - Documentation (URL / URL Table)
Post by: katamadone [CH] on September 25, 2018, 11:37:32 am
Last question about expiration answered (days + hours) are the two fields first days, second hours
I was confused because I had in mind the second field was used for comments at alias.. but that's not the case....
Title: Re: Aliases - Documentation (URL / URL Table)
Post by: katamadone [CH] on September 25, 2018, 01:29:40 pm
if any of the developers are familiar with that subject:
is there a definition / behaviour what should occur if the url is not reachable or perhaps will be decided upon the status code what will be done with the alias?

Because if i block traffic with such an alias (or allow), I could never be sure, that the traffic is really blocked. Because why ever the webserver is not reachable at the time of updating the alias, how can i prohibit, that the alias would not end empty, so I would allow traffic without knowing it?