1
General Discussion / Re: How to re-order firewall rules?
« on: May 15, 2022, 01:10:24 pm »
This is not intuitive, what was wrong with the anchor from the open source version? Anyways thanks.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
2
General Discussion / How to re-order firewall rules?
« on: May 11, 2022, 12:59:25 pm »
Since firewall rules are matched from top to bottom, how can I re-order them?
I have this questoin because I want to make a policy based routing (the host 172.16.1.73 should use a different gateway), but according to the log, the matched rule is the default one (probably because it is listed first). That is why I want to pull the last rule to the top. Screenshots attached.
Edit: I just found out how to do it,
apparenty you select the rule that you want to move, then find the other rule that should be below the selected one, and press the button in the right which looks like a back arrow.
I have this questoin because I want to make a policy based routing (the host 172.16.1.73 should use a different gateway), but according to the log, the matched rule is the default one (probably because it is listed first). That is why I want to pull the last rule to the top. Screenshots attached.
Edit: I just found out how to do it,
apparenty you select the rule that you want to move, then find the other rule that should be below the selected one, and press the button in the right which looks like a back arrow.
3
General Discussion / I need help with shaping traffic
« on: May 08, 2022, 11:56:06 am »
Hello,
I have an internet bandwidth of 10Mbps, and my main work is VoIP phones (iPECS) and an erp system hosted outside (I have the public IP for that system)
I want to make sure that VoIP callls are prioritiesed and the system is also prioritiesed, everything else is secondary and can be delayed.
I guess that I was successful in dedicating 2.5Mbps for voip following this tutorial https://www.sunnyvalley.io/docs/network-security-tutorials/how-to-set-up-traffic-shaper-in-opnsense#how-to-reserve-dedicated-bandwidth-for-real-time-traffic., but I am not sure about prioritizing the erp sytem through its IP address.
I separated the voip in its own pipe, and the rest of the traffic (including the erp system) is in the other pipe. then I created queues with 1, and 9 weights, the 9 one is for the system. But after opening the status it looks like the system queues and rules are not used!
I attached screenshots for pipes, queues, rules, and the status.
I have an internet bandwidth of 10Mbps, and my main work is VoIP phones (iPECS) and an erp system hosted outside (I have the public IP for that system)
I want to make sure that VoIP callls are prioritiesed and the system is also prioritiesed, everything else is secondary and can be delayed.
I guess that I was successful in dedicating 2.5Mbps for voip following this tutorial https://www.sunnyvalley.io/docs/network-security-tutorials/how-to-set-up-traffic-shaper-in-opnsense#how-to-reserve-dedicated-bandwidth-for-real-time-traffic., but I am not sure about prioritizing the erp sytem through its IP address.
I separated the voip in its own pipe, and the rest of the traffic (including the erp system) is in the other pipe. then I created queues with 1, and 9 weights, the 9 one is for the system. But after opening the status it looks like the system queues and rules are not used!
I attached screenshots for pipes, queues, rules, and the status.
Pages: [1]