Apr 16, 2020 · However, this didn't appear to have any firewall entries - more top level controller items. Update --- try this: I've run it and I think it's working - but haven't really had time to parse apart the data. I'm getting something when firewall logging is on, just haven't confirmed it yet to be correct. SSH into the UDM and run the following command:

Dec 10, 2021 · Thanks for posting on r/Ubiquiti! This subreddit is here to provide unofficial technical support to people who use or want to dive into the world of Ubiquiti products. If you haven’t already been descriptive in your post, please take the time to edit it and add as many useful details as you can.

Jul 14, 2023 · If that isn't a problem for you I had the best success when using Firewall Rules. Using Traffic Rules mostly worked when using the IP Address category, but at the time I tried it was a bit cumbersome/buggy since the Wireguard network isn't added as a local network to the appliance. Block Wireguard Internally via Firewall Rules:

Aug 23, 2021 · I prefer the older interface for firewall rules, so after you enabled the old interface, go to "Settings -> Routing & Firewall -> click on "Firewall" on the top tab -> click on "Rules IPv4" -> click on "GUEST IN" as shown here: older UI. Now click on "+ Create New Rule".

Apr 9, 2023 · However, I tried to create a firewall rule to mirror the port forward rule and I could not get the firewall rule to work (I disabled the port forward rule while I was testing the firewall rule). I was comparing both the port forward rule and the firewall rule and they were identical in allowing the one specific WAN IP and the handful of ports ...

This is a place to discuss all things Ubiquiti, especially UniFi. Members Online Got frustrated with an ASUS ROG router and went with a U6 Mesh + UCG-Ultra (on the way) instead.

Sep 16, 2018 · introduce some firewall rule(s) add additional Honeypot IPs introduce additional firewall rules (at this point those are not applied/visible via iptables) delete Honeypot IPs/deactivate honeypot (the chain still is active and keeps the original Honeypot ips despite of them being removed)

May 17, 2020 · I must admit I am not using a Ubiquiti router or firewall, but pfSense, but in essence the goal is identical. I have allowed access from my main LAN to the IP address of the Chromecast on my IOT network, with just the 3 TCP ports. I have no return traffic allowed, and streaming works just fine.

Jul 22, 2023 · PFsense for firewall, NextDNS for encrypted dns, Ubiquiti for the hardware. I’d say Netgate 6100 min connected with DAC or Fiber to UDM pro. That’s what I use no issues. I have ran UDM Pro SE with full firewall on and NextDNS no problems but Pfsense I prefer for reliable and dependable security.

Apr 25, 2023 · My firewall rules apply mainly to my main vlan, where my end devices (iPhones, iPad, Apple Watches, AppleTV, Macs, PCs) reside. There are other rules to get into my management/default vlan from my main vlan. I have a WPA3-Enterprise Wifi with Radius User Auth for all my Wifi end devices.