Are Your pfSense Filters Really Working?

Too many rules and logs (?) makes them randomly fail

Teri Radichel
Cloud Security
Published in
5 min readApr 27, 2024

--

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

⚙️ Check out my series on Automating Cybersecurity Metrics. The Code.

🔒 Related Stories: Network Security | IOT and OS Security | DNS Security

💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Update: a series of things happened since I wrote this. I posted some strange experiences in Google Chrome where my firewall logs did not match my firewall rules. Was Google Chrome or pfSense showing me either incorrect rules or incorrect logs? I don’t know. But something was going on. Google just patched a zero day vulnerability. I also found an expired certificate on what appears to be one of the Netgate update servers:

In addition, I was having problems with netgate domains as explained at the bottom of this post:

--

--

Teri Radichel
Teri Radichel

Written by Teri Radichel

CEO 2nd Sight Lab | Pentesting | Research | AWS Security Hero | Masters of Infosec & Masters Software Engineering | GSE | IANS | SANS Difference Makers Award