firewall rule to block internet - have i created correctly?

Started by chenks, March 15, 2023, 04:59:48 PM

Previous topic - Next topic
hi, i'm fairly new to opnsense and just wanting to get the more knowledgable folk to confirm i've got my firewall rule set up correctly?

i have a eufy camera that i want to block from having internet access (i use it solely via HKSV).
it has a static IP of 192.168.50.11

i created a firewall alias and added that IP to the alias.
created a rule

action: block
interface: LAN
direction: IN
TCP: IPv4
protocol: ANY
source: the alias i created
destination: ANY

i then moved the rule to the top of the rules list.
from initial testing it does seem to be working, if i disable wifi on my phone and try to access the camera via the eufy app then it fails to connect, if i turn wifi back on then the eufy app connects. before i created the rule the eufy app was able to connect to the camera regardless.




Looks good. Make sure the cam cannot / can never connect via IPv6 to the internet.
Another dirty way is to set wrong DNS and gateway in client / cam settings.
i am not an expert... just trying to help...

Quote from: tiermutter on March 15, 2023, 05:06:08 PM
Looks good. Make sure the cam cannot / can never connect via IPv6 to the internet.
Another dirty way is to set wrong DNS and gateway in client / cam settings.

i don't have DHCPv6 Server enabled, as my ISP is IPv4.

IPv6 is something i've wonder whether i should leave disabled as there would be no benefit to having it enabled due to ISP being IPv4 only.

strangely though, if i do ipconfig on my windows laptop it shows it as having an IPv6 address, but i guess it's self assigning one as it hasn't come from the opnsense DHCP server.