Comment on OPNSense vlan client firewall rules help
rainbowgreen@lemmy.world 1 year agoDeny everything, Permit only private address range, specifically the subnet the device is on.
Comment on OPNSense vlan client firewall rules help
rainbowgreen@lemmy.world 1 year agoDeny everything, Permit only private address range, specifically the subnet the device is on.
sneaky_b45tard@feddit.de 1 year ago
A firewall usually reads the rules from top to bottom and applies the first match. So when your first rule is deny everything , it will deny literally anything before the second rule will be applied.
Your deny rule should always be at the end.