eworldproblems
  • Home
  • About
  • Awesome Ideas That Somebody Else Already Thought Of
  • Perl defects
  • Books & Resources
Follow

Reset connection rate limit in pfSense



Note to self next time I get bit by it:

When using the “Max. src. conn. Rate” advanced option in a pfSense firewall rule, if desirable traffic ends up exceeding that rate, it’s really really hard to let the traffic through again. PfSense adds a rule to a firewall table, “virusprot”, that’s not listed in the web UI. The rule blocks all traffic from the offending source address, and it hangs around for a really long time. So adjusting the rate limit, clearing the state table, etc. still won’t let the traffic through.

After ~30 minutes of reading, the following command at the shell is what does the trick:

pfctl -t virusprot -F rules

…which translates to something like “packet filter control, operate on table virusprot and flush the rules in it.”

Posted in Uncategorized
SHARE THIS Twitter Facebook Delicious StumbleUpon E-mail
← Connecting to University of Minnesota VPN with Ubuntu / NetworkManager native client

No Comments Yet

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Recent Posts

  • Reset connection rate limit in pfSense
  • Connecting to University of Minnesota VPN with Ubuntu / NetworkManager native client
  • Running nodes against multiple puppetmasters as an upgrade strategy
  • The easiest way to (re)start MySQL replication
  • Keeping up on one’s OpenSSL cipher configurations without being a fulltime sysadmin

Categories

  • Computing tips
    • Big Storage @ Home
    • Linux
  • dev
    • devops
    • Drupal
    • lang
      • HTML
      • JavaScript
      • PHP
    • SignalR
  • Product Reviews
  • Uncategorized

Tags

Apache iframe malware performance Security SignalR YWZmaWQ9MDUyODg=

Archives

  • June 2018
  • January 2018
  • August 2017
  • January 2017
  • December 2016
  • November 2016
  • July 2016
  • February 2016
  • January 2016
  • September 2015
  • March 2015
  • February 2015
  • November 2014
  • August 2014
  • July 2014
  • April 2014
  • February 2014
  • January 2014
  • October 2013
  • August 2013
  • June 2013
  • January 2013
  • December 2012
  • November 2012
  • September 2012
  • August 2012
  • July 2012

Blogroll

  • A Ph.D doing DevOps (and lots else)
  • gavinj.net – interesting dev blog
  • Louwrentius.com – zfs@home with 4x the budget, other goodies
  • Me on github
  • My old edulogon.com blog
  • My old GSOC blog
  • My wife started baking a lot
  • Now it's official, my wife is a foodie

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org

EvoLve theme by Theme4Press  •  Powered by WordPress eworldproblems