A block list that cuts the connections already open, measured, 2026-10-19¶
XGS: Settings - Cut open connections when listed. A block list in OPNsense is an alias - a pf
table filled from a URL, a feed or by hand - and a rule that blocks it blocks new connections only. A
connection opened before its address was listed keeps its pf state, and with offloading on its flow in
the coprocessor, for as long as it carries traffic. With a list chosen here,
scripts/xgs/lists_cut.py compares it every minute (cron) and when the settings are saved with what
it held before, and kills by id every pf state with either end in what was added; each driver then
takes the connection out of hardware. Choosing a list cuts what it already names.
The whole page, with how it was taken and what it does not show: A block list that cuts the connections already open, measured, 2026-10-19.
The discussion of this page is held in the project's GitHub Discussions. Showing it here loads giscus from giscus.app and GitHub, and writing in it needs a GitHub account - what that means.