Treat a pfSense route-alias edit as an immediate routing change
Saving an alias used by a static route can update the routing table before Apply Changes.
Read the guideDSE security knowledge hubNetworks & Infrastructure
Networks & Infrastructure
Knowledge
Page 21 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Networks & Infrastructure knowledge center
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
DSE post stream
1,594 articlesNetworks & Infrastructure
Choose pfSense Hybrid NAT when only a few source translations need exceptions
Manual rules do not take effect under every outbound NAT mode.
Read the guide
Label pfSense packet captures with the NAT stage they observe
A capture and a firewall rule may legitimately show different addresses for the same flow.
Read the guide
Review every permitted protocol when using pfSense 1:1 NAT
A broad WAN pass combined with 1:1 NAT exposes more than a single port forward would.
Read the guide
Check firewall-local port conflicts before adding a pfSense port forward
A matching port forward can take precedence over the firewall's own service on that interface.
Read the guide
Choose a pfSense virtual IP by its ARP and service-binding behavior
A virtual address used for NAT does not necessarily behave like an address owned by a local service.
Read the guide
Define what pfSense permits outside a scheduled rule window
An inactive scheduled rule disappears from consideration; its action is not reversed.
Read the guide
Make pfSense floating-rule Quick behavior explicit
Floating rules can use last-match behavior, so an early visual position alone does not settle the outcome.
Read the guide
Check pfSense rule classes before trying to override a group block
A rule placed on an interface cannot override an earlier matching group rule.
Read the guide
Treat OpenTelemetry Baggage as propagated context with its own trust boundary
Propagation does not automatically make a value a recorded span attribute or a trusted identity.
Read the guide