4 ms·
I already get a headache when thinking of configuring firewall rules with a dynamic prefix for all my hosts.
by Helmut10001 3y ago
I already get a headache when thinking of configuring firewall rules with a dynamic prefix for all my hosts.
- Astronaut3315 3y agoI found building rules around a dynamic prefix to be simple enough on my old EdgeRouter once I found the poorly documented magic incantation to do so. It isn’t possible on the UniFi system that replaced it. Who needs basic core functionality anyway.
- Helmut10001 3y agoYeah, pfsense apparently just solved this partly (except for aliases) [1], same with OPNsense [2], where there is still an open issue [3]. There are some declined PRs that are not "high priority" [4]. Note that I have just looked these issues up - I don't have insight into any of these. This is not meant as ranting. [1]: https://redmine.pfsense.org/issues/6626 [2]: https://github.com/opnsense/core/issues/2544 [3]: https://github.com/opnsense/core/issues/6158 [4]: https://github.com/opnsense/core/pull/5574