Hi,

On Wed, 15 Nov 2017 12:44:51 -0300
Roberto Carna <robertocarn...@gmail.com> wrote:

> Oliver, I ask about the opposite that you explain to me:
> 
> Everthing going out from WAN to Internet is allowed ???
> 
> In accordance with my tests, yes...and if I add an explicit rule it
> doesn't block a given outgoing traffic.
> 
> In the affirmative case, how can I disable the default OUTGOING pass
> rules in WAN interface ???

Rules on interfaces are filtering inbound traffic, see:
https://doc.pfsense.org/index.php/Firewall_Rule_Basics

Normally thats enough. If you like to deny certain/all outbound traffic
you simply add those rules to the LAN interface.

If that is not enough, then you need to use floating rules. Those allow
you to specify the direction (inbound vs outbound).
https://doc.pfsense.org/index.php/What_are_Floating_Rules

Cheers,
Lo
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Reply via email to