Feature Request: Ignoring ports

Follow

Blaz Pivk

• February 06, 2019 21:19

Basically when you run a server (which I do) you have some traffic through some ports (web server, unifi controller, file sharing services). All of that traffic triggers different alerts on Firewalla (P2P services trigger download guard and other services trigger connection guard).

It would be nice to set our devices to ignore specific ports. This would decrease the load on our devices and reduce the number of false positives. My network has one computer that has a moderate traffic flow which produces about 20 alerts daily (only P2P traffic because of torrents) and my server which causes loads of alerts that are mainly caused by backup software sending data out and different web services. 

0

• 

  Firewalla

  • February 06, 2019 22:44

  Do you mean white list say port 443 on device x?  If it matches, don't generate alarm?

  0

  Permalink
• 

  Blaz Pivk

  • February 06, 2019 23:08
  • Edited

  Yeah something like that.

  I have a lot of ports open that I know they are ok so whitelisting let's say port 16390 for torrents would go a long way since that traffic wouldn't trigger download alerts.

  Or port 80 on a web server as it is ok if different IPs connect to it and it can be expected.

  But it would be even better if we had an option to exclude those ports from checking altogether as it would reduce the load on Firewallas.

  0

  Permalink
• 

  Firewalla

  • February 06, 2019 23:20

  Got it, will note down the request.  This type of feature is definitely not common, so likely to be in our back log. 

  0

  Permalink
• 

  Blaz Pivk

  • February 07, 2019 06:52

  Probably not on the reds but since the blue will be used more in an office and homelab environment where servers and high traffic associated with them are a common thing you'll probably get this requested more often.

  0

  Permalink

Please sign in to leave a comment.