Learn more about pfSense EasyRule Functionality from our experts. Our pfSense Support team is here to help you with your questions and concerns.

pfSense EasyRule Functionality | About

EasyRule is a powerful tool that is accessible through the user-friendly GUI and the command line.

It helps us deploy and manage firewall rules, thereby boosting our network’s armor with better efficiency.

We can find the EasyRule function in the Firewall Log view by heading to Status under System Logs in the Firewall tab in pfSense.

Furthermore, we can add a block rule for that IP address on the interface by clicking the icon next to the source IP address.

In other words, this icon helps us create or add to an alias containing IP addresses added from Easy Rule and then blocks them on the selected interface.

Similarly, the icon next to the destination IP address is the same as the block action, but it also adds a stronger pass rule. Additionally, this pass rule allows traffic on the interface. However, it must match the source IP address, same protocol, destination port, and destination IP address.

If you prefer to use the EasyRule function in the command shell, we have your back. We can use it to easily manage EasyRule firewall rules and entries from a shell prompt.

Running the easyrule command without parameters offers us a usage message explaining its syntax.

The easyrule adds a block rule with an alias, or a precise pass rule mentioning the protocol, source, and destination.

Here is a look at the command syntax:
# easyrule action interface parameters

Here:

• action

  This can be either pass, block, showblock, or unblock. Each action takes different parameters.
• interface

  This indicates the descriptive name of the interface. For instance WAN, LAN, DMZ, etc. Furthermore, the interface value can also be the internal designation for the interface.

[Need assistance with a different issue? Our team is available 24/7.]

Conclusion

In summary, our Support Techs introduced us to pfSense EasyRule Functionality and its syntax.