Remote Backup Across a WG VPN

[spetrillo]

Hello all,

I have a VPN rule on the receiving side that allows WG access to all internal vlans. On the same firewall I have one vlan that I have purposely not set any rules, so it is isolated. It is a vlan for storage related items. Which rule trumps the other?

Thanks,
Steve

[Patrick M. Hausen]

Depends on which interface (or floating) the rules are defined on and on which interface a packet we want to consider hits the firewall first.

Assuming you use "in" and "quick" rules as recommended for most cases any packet is matched against the rules and treated as the first matching rule dictates.

Rules are applied in the order

- floating
- interface groups
- interfaces

and then from top to bottom until one matches.