OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • General Discussion »
  • Blocklist on WAN interface
« previous next »
  • Print
Pages: [1]

Author Topic: Blocklist on WAN interface  (Read 1373 times)

micmeyer

  • Newbie
  • *
  • Posts: 4
  • Karma: 1
    • View Profile
Blocklist on WAN interface
« on: November 06, 2020, 06:13:22 am »
The following page describes how to configure the Spamhaus blocklist:
https://docs.opnsense.org/manual/how-tos/edrop.html

The blocklist is applied to both the WAN and the LAN interface.

What is the advantage of using the blocklist on the WAN interface?
I would have expected that this isn't necessary since the WAN interface denies everything by default (default deny rule).
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 6767
  • Karma: 494
    • View Profile
Re: Blocklist on WAN interface
« Reply #1 on: November 06, 2020, 06:47:31 am »
But when you add a port forward everything is accepted for it, so you deny the bad guys before
Logged
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • General Discussion »
  • Blocklist on WAN interface
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2