Mr Router wrote:
It is required to use reset states some time is real time traffic is running form the IP on which you are applying the rules , but commonly it works without it.reboot is not required !

It doesn't work like that for me.. I just delete or add the rule that
let me in to the wan interface ip from an ip on the wan, but it doesn't work until the pfSense box is rebooted.

1) delete rule
2) save
3) apply changes
4) access from the wan still works!
5) reset states
5) access from the wan still works! (once still worked for a couple of minutes, then became unreacheable from wan)
6) after 15 minutes that it is still reacheable from wan, reboot
7) access from the wan is now denied
8) add again the firewall rule
9) save and apply changes
10) access from the wan still doesn't work!
11) reset states
12) access from the wan still doesn't work!
13) reboot
14) access from the wan works again

As you see, apart from once, it always need a reboot to apply a simple rule delete or add!

I even reset pfSense to the factory defaults, but nothing change.

So.. it is this a bug in 2.0-RC2 or is it some misconfiguration on my side?

Best regards.
Robi




On Fri, Jun 10, 2011 at 12:45 PM, Roberto Nunnari <[email protected] <mailto:[email protected]>> wrote:

    David Burgess wrote:

        On Thu, Jun 9, 2011 at 10:59 AM, Roberto Nunnari
        <[email protected] <mailto:[email protected]>> wrote:

            Hi.

            I just discovered that modifications to the firewall rules
            will not be
            active until the box is rebooted..

            Is it a known bug or a misconfiguration on my side?


        Did you try this?

        http://doc.pfsense.org/index.php/Reset_States

        db


    I'll try that, too.
    Thank you.
    Robi



    ---------------------------------------------------------------------
    To unsubscribe, e-mail: [email protected]
    <mailto:[email protected]>
    For additional commands, e-mail: [email protected]
    <mailto:[email protected]>

    Commercial support available - https://portal.pfsense.org




--
-----------------------------------------
Regards,

Mr.Router


--
Roberto Nunnari
Servizi Informatici SUPSI-DTI
SUPSI-DTI - Via Cantonale - 6928 Manno - Switzerland
helpdesk email: mailto: [email protected]
direct email: mailto:[email protected]
tel: +41-58-6666561

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Commercial support available - https://portal.pfsense.org

Reply via email to