Disable: "Default allow LAN to any rule"

Started by marsk, November 07, 2026, 10:36:35 AM

Previous topic - Next topic
Hi

Disable firewall rules:
- Default allow LAN to any rule
- Default allow LAN IPv6 to any rule

I can't edit the "Default allow LAN to any" and "Default allow LAN IPv6 to any" rules, it seems they are locked.




//marsk

Rules are processed in order, by default as first match, so there is no impediment to adding overriding restrictions prior to the default rules.

What problem are you trying to solve?
Deciso DEC697

Well press on the link button in the rule. You will most likely end up in the migrator cause theyre old rules.
Hardware:
DEC740

Sounds like a case of https://github.com/opnsense/changelog/blob/f0dfc461e2c50b4748ca2770a77da92540743803/community/26.7/26.7#L98


Cheers,
Franco