# UDM pro: How to modify or delete firewall rules? | Ubiquiti Community

Main Timeline Releases Design Center Help Center Tech Specs
Posted 2 years ago Last Activity 2 years ago

#
UDM pro: How to modify or delete firewall rules?

0
6
3.2k

Currently I have a large list (600+) of firewall entries (manually blocked many IP's from the IPS)

I want to clean out several IP entries, but doing this by the GUI is taking a lot of steps / time / exact clicking:

1. Search the IP in the firewall list
2. select the rule
3. click remove
4. click confirm

One rule is removed... 599 to go.

By commandline on a Cisco (and I believe the simple USG) have this option and makes it easier / faster to do this job.

Is it true that a more advanced router with firewall is only manageable via GUI?

### Responses (6)

Sort by
Page
1
lcire1
2 years ago
1

There is an api but otherwise point and click.

https://github.com/Art-of-WiFi

@slooffmaster

lcire1
2 years ago
1

Even the USG CLI would not help as your rules are stored in the controller and would just come right back the next time it provisioned.

_
_Space
2 years ago
1

@joostman if you want CLI based mgmt, that's the edge line of router.

manually blocking IP's ? you should use groups.

J
joostman
2 years ago
1

> @_Space wrote:

> @joostman if you want CLI based mgmt, that's the edge line of router.

> manually blocking IP's ? you should use groups.

I did it the wrong way 😊 I first blocked a lot and now found out that using groups would save me a lot of rule-lines.

Now I have implemented those blocking groups (like 40 networks I have added) but now I want to clean up the mess, by removing the duplicates (the ip addresses which are in a blocked network) I still have from this action.

Austwhite
2 years ago
0

I have done some looking around on bulk removal of firewall rules in the SDN app also and not found it. Same reason as @joostman I blocked by grouping and need to delete a stack of individual IP's now. Even my old basic crap ISP provided modem allowed me to select multiple firewall rules and delete them all at once.

Is there a way to do this in the SDN Application? If not, we really need this added.

To the OP Not sure the UDM Pro is "more advanced" than cisco or other routers. It is an entirely different product as it works on Software Defined Network (SDN) rather than each switch being individually configured in what is essentially a firmware. You do need to do it in the GUI as there is no effective CLI way to do it with the UDM Pro or similar Unifi OS devices.

lcire1
2 years ago
0

I tend to agree but would add that if would be great if unifi added a custom only rule set radio that returned the firewall to a default deny all state from where a complete set of custom FW rules could be constructed.

In the normally unchecked state it would continue to auto load the current set of intervlan routing allowed accounting rules as exists by default now.

Page
1
J
joostman
2 years ago

### Tags

UniFi UniFi Routing & Switching
UI.com