Alias Statistics

Started by CJ, May 19, 2023, 05:29:13 PM

Previous topic - Next topic
I created an alias for a URL Table.  I've implemented a firewall rule with this alias and I've seen the rule show up in the live view of the firewall logs.

But when I go to the Statistics page under Firewall Diagnostics there are no counts for anything.  I checked the alias and it has statistics enabled.

Am I misunderstanding how alias statistics work?  Does the firewall have to be a pass in order for them to show anything?

Thanks.

You want to have a rule with the alias set to match in order to get statistics about the alias matches.


Cheers,
Franco

I use URLs or domains in the host(s) alias options as I needed a combination of host and domain targets.

I'm not sure if this applies as well for the URL Table, but OPN will resolve these domains, and once they are resolved, you can see them in the FW > Diagnostic > Alias table.

In the logs you can see if OPN was able to resolve them.

Regards,
S.
Networking is love. You may hate it, but in the end, you always come back to it.

OPNSense HW
APU2D2 - deceased
N5105 - i226-V | Patriot 2x8G 3200 DDR4 | L 790 512G - VM HA(SOON)
N100   - i226-V | Crucial 16G  4800 DDR5 | S 980 500G - PROD

Quote from: franco on May 19, 2023, 09:50:46 PM
You want to have a rule with the alias set to match in order to get statistics about the alias matches.

Cheers,
Franco

What do you mean by set to match?  The rule I have is set to reject any traffic to the alias.

Quote from: Seimus on May 19, 2023, 10:17:54 PM
I use URLs or domains in the host(s) alias options as I needed a combination of host and domain targets.

I'm not sure if this applies as well for the URL Table, but OPN will resolve these domains, and once they are resolved, you can see them in the FW > Diagnostic > Alias table.

In the logs you can see if OPN was able to resolve them.

Regards,
S.

The url points to a list of ips.  There are no domains.  When I go to the alias, it shows a number that indicates that it has loaded all of the ips into the alias.