Because of problems like this i prefer use freebsd or openbsd, this
scenario is easy to configure.

2017-04-19 16:43 GMT-03:00 Steve Yates <[email protected]>:

> https://doc.pfsense.org/index.php/Limiters#Known_limitations
>
> "On pfSense 2.2 and 2.3, limiters cannot be used on firewall rules
> residing on interfaces where NAT applies. This limits their use to LAN-type
> interfaces only, and not WANs, in most circumstances. This has been fixed
> on pfSense 2.4. Bug #4326"
>
> --
>
> Steve Yates
> ITS, Inc.
>
> -----Original Message-----
> From: List [mailto:[email protected]] On Behalf Of WebDawg
> Sent: Wednesday, April 19, 2017 2:33 PM
> To: pfSense Support and Discussion Mailing List <[email protected]>
> Subject: Re: [pfSense] Limiter on LAN side not applying to NATted
> connection
>
> On Wed, Apr 19, 2017 at 2:46 PM, Steve Yates <[email protected]> wrote:
>
> >         I suppose.  From the states/traffic recorded next to each rule,
> It
> > looks like the WAN firewall rule applies and the LAN firewall rule does
> > not.  Per the docs WAN side limiters will work (again?) in pfSense 2.4
> but
> > not 2.2-2.3.
> >
> > --
> >
> > Steve Yates
> > ITS, Inc.
> >
> >
> > Steve,
> >
> > Is this an ingress vs egress question?
> >
> > http://pfsensesetup.com/egress-filtering-with-pfsense/
> >
> > That is if you are trying to limit something 'in' you would need to put
> the
> > rule on the WAN side?
> >
> >
> > _______________________________________________
> >
>
> I do not know about the docs but since it is a single TCP stream in will
> not just the WAN rule apply?
>
> What docs are you talking about?  I would figure limiters would work on any
> interface.
> _______________________________________________
> pfSense mailing list
> https://lists.pfsense.org/mailman/listinfo/list
> Support the project with Gold! https://pfsense.org/gold
> _______________________________________________
> pfSense mailing list
> https://lists.pfsense.org/mailman/listinfo/list
> Support the project with Gold! https://pfsense.org/gold
>
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Reply via email to