pfSense
Free, professional Open Source Firewall for the enterprise
The guide shows you how to install pfSense the easy way, optionally enabling GeoIP for country based rules, proxy server with virus scanner, high availability failover and syncing different firewalls with rules from a master firewall.
Easy understandable for beginners, helpful for professionals.
Best security based on FreeBSD
Easy maintainable
Scalable
Saves your company money
Introduction to security
In the past services offered on the Internet mostly was unprotected and traffic was sent in clear text between server and user. Firewalls was unknown to most users.
Times has changed now, spying on traffic and hacking is all around. Actually it needs less than a few minutes to have the first bots trying all of their exploit scripts against your IP address. Never think you are not important enough for hackers because in the first step bots operates on IP addresses without knowing who is behind this IP address. Things will be exploited pretty fast.
A modern firewall with strong security, combined with other prevention methods like transparent proxy servers scanning for viruses, using modern and state-of-the-art server technologies is a must for every system connected to the Internet.
After using this great solution a long time I finally wrote this e-book for you.
Setup of this guide – Our Goal
This guide will show you how to set up a pfSense firewall in a few minutes. We use a virtual machine setup, but you can use any new or old PC and embedded systems whatever suits you best.
Table of Contents
Introduction
Table of Contents
Legal Notes
Introduction to security
Setup of this guide – Our Goal
Base setup10
Our final setup10
Prepare to install
Download the software11
Install pfSense
Prepare boot12
Boot and setup the basics12
First boot16
Assign interfaces and IP addresses17
Accessing the web interface
Continue basic settings20
Complete the Wizard20
Detailed Setup
System Advanced23
System Advanced / Admin Access23
System Advanced / Networking23
System Advanced / Miscellaneous24
System Advanced / Notifications24
System / Certificate Manager25
System / Certificate Manager / Certificates25
System / General setup26
System / High Availability Sync27
pfsync protocoll / multicast27
Synchronization Settings (XMLRPC Sync)27
System / Routing Gateways29
System / User Manager / Users29
Interfaces30
The Firewall
Firewall / Aliases32
Firewall / NAT34
Firewall NAT / Port Forward34
Firewall NAT / 1:135
Firewall / NAT / Outbound36
Firewall / Rules37
Firewall / Rules / WAN37
Firewall / Rules / LAN38
Firewall / Rules / LAN / change default rules38
Firewall / Schedules (time based rules)40
Firewall / Virtual IPs40
Services
Captive Portal42
DHCP(4/6) Relay42
DHCP(4/6) Server42
DNS Resolver45
Load Balancer46
NTP46
The updated rules46
VPN
Ipsec48
L2TP48
OpenVPN48
Proxy Server Setup
Install required packages50
Proxy server settings51
Local Cache51
General52
Antivirus settings67
ACLs68
Authentication / Users68
Real Time69
Sync to other servers69
URL blocking settings69
General Settings69
Common ACL70
XMLRPC Sync71
Updated firewall rules71
GeoIP blocking Setup
Install required packages73
Setup Country Blocking73
General Setup73
Select countries / regions to block74
System Backup and Restore
More Features
About The Author
Other Books By (Author)
Link List for this e-book
pfSense - Project81
FreeBSD Project Page81
CTS Solutions Website81
7-Zip Website81
Block Lists usable for URL blocking81
Can I Ask A Favour?
Karl M. Joch is founder of CTS GMBH with more than 30 years experience in national and international projects. He worked in over 15 countries.
Free, professional Open Source Firewall for the enterprise
The guide shows you how to install pfSense the easy way, optionally enabling GeoIP for country based rules, proxy server with virus scanner, high availability failover and syncing different firewalls with rules from a master firewall.
Easy understandable for beginners, helpful for professionals.
Best security based on FreeBSD
Easy maintainable
Scalable
Saves your company money
Introduction to security
In the past services offered on the Internet mostly was unprotected and traffic was sent in clear text between server and user. Firewalls was unknown to most users.
Times has changed now, spying on traffic and hacking is all around. Actually it needs less than a few minutes to have the first bots trying all of their exploit scripts against your IP address. Never think you are not important enough for hackers because in the first step bots operates on IP addresses without knowing who is behind this IP address. Things will be exploited pretty fast.
A modern firewall with strong security, combined with other prevention methods like transparent proxy servers scanning for viruses, using modern and state-of-the-art server technologies is a must for every system connected to the Internet.
After using this great solution a long time I finally wrote this e-book for you.
Setup of this guide – Our Goal
This guide will show you how to set up a pfSense firewall in a few minutes. We use a virtual machine setup, but you can use any new or old PC and embedded systems whatever suits you best.
Table of Contents
Introduction
Table of Contents
Legal Notes
Introduction to security
Setup of this guide – Our Goal
Base setup10
Our final setup10
Prepare to install
Download the software11
Install pfSense
Prepare boot12
Boot and setup the basics12
First boot16
Assign interfaces and IP addresses17
Accessing the web interface
Continue basic settings20
Complete the Wizard20
Detailed Setup
System Advanced23
System Advanced / Admin Access23
System Advanced / Networking23
System Advanced / Miscellaneous24
System Advanced / Notifications24
System / Certificate Manager25
System / Certificate Manager / Certificates25
System / General setup26
System / High Availability Sync27
pfsync protocoll / multicast27
Synchronization Settings (XMLRPC Sync)27
System / Routing Gateways29
System / User Manager / Users29
Interfaces30
The Firewall
Firewall / Aliases32
Firewall / NAT34
Firewall NAT / Port Forward34
Firewall NAT / 1:135
Firewall / NAT / Outbound36
Firewall / Rules37
Firewall / Rules / WAN37
Firewall / Rules / LAN38
Firewall / Rules / LAN / change default rules38
Firewall / Schedules (time based rules)40
Firewall / Virtual IPs40
Services
Captive Portal42
DHCP(4/6) Relay42
DHCP(4/6) Server42
DNS Resolver45
Load Balancer46
NTP46
The updated rules46
VPN
Ipsec48
L2TP48
OpenVPN48
Proxy Server Setup
Install required packages50
Proxy server settings51
Local Cache51
General52
Antivirus settings67
ACLs68
Authentication / Users68
Real Time69
Sync to other servers69
URL blocking settings69
General Settings69
Common ACL70
XMLRPC Sync71
Updated firewall rules71
GeoIP blocking Setup
Install required packages73
Setup Country Blocking73
General Setup73
Select countries / regions to block74
System Backup and Restore
More Features
About The Author
Other Books By (Author)
Link List for this e-book
pfSense - Project81
FreeBSD Project Page81
CTS Solutions Website81
7-Zip Website81
Block Lists usable for URL blocking81
Can I Ask A Favour?
Karl M. Joch is founder of CTS GMBH with more than 30 years experience in national and international projects. He worked in over 15 countries.
