Firewall Scheduling

[chrisw75]

Hi Everyone

Running OPNsense 23.7.7_3-amd64

I've read several different posts and have mimicked the configuration in hopes of achieving the same goal. My son likes to stay up very very late on school nights (any night actually) and play video games, etc. My wife and I decided to implement scheduling for his devices in an attempt to curb this activity so he actually goes to sleep and is ready for school the next morning.

I thought I had this working, but this morning, I woke up around 1AM and walked by his room and sure enough, he's on his PS5 playing Fortnite with friends. I don't have it working I even then at the moment, logged into my OPNSense gateway and added an explicit BLOCK for his PS5 and still wouldn't stop the connection (can see this for 192.168.1.59 in the rules screenshot.)

Here's what I have:

- An ALIAS called KIDS_DEVICES with a list of IP addresses
- Two LAN firewall rules: An allow rule, linked to the schedule (below) and to the alias above. I also have a reject rule linked to the alias above, no schedule. Then the rest of my unrelated LAN rules follow. These two rules are directly beneath the pre-generated (19) rules.
- One schedule, with the following: Mon-Fri 0800-2300, Fri 0800-2359, Sat/Sun 0000-0000

I checked advance settings regarding states and scheduling under Advanced, it's disabled. I also found a Reddit post that scheduling should be on 0-15-30-45 in order to clear states, except for one rule, I did this.

Really need this kid to get proper sleep and not game with his friends into the wee hours of the morning. Could really use some help.

I'll try to add some screenshots to help

Thanks!

[chrisw75]

More screenshots.

[chrisw75]

Found a post that shows direction is inbound not outbound (as I have it.) I've switched to inbound to see if that helps. Also found another post that a user had to schedule cron to kill all states at specific times to ensure any existing connections were terminated. Will try this first and see if I can solve this on my own but would appreciate any feedback

[hansen97124]

not sure why your destination is ! LAN NET.  I used "*" (any) for my destination and it worked fine. 

I didn't see any other material differences from what I did.