Filter rules on a pfsync interface

[Zugschlus]

Hi,

what are the recommendations for filter rules on the pfsync interface? Some person has dropped an allow all rule there on "my" cluster and I don't feel very comfortable with that.

Greetings
Marc

[Monviech (Cedrik)]

Well essentially if its a point to point link between both firewalls the any rule doesnt hurt anybody.

If youre paranoid only allow the pfsync protocol. If the firewalls also xmlrpc sync over the link also the WebGUI port and https.