Book Image

Learn pfSense 2.4

By : David Zientara
Book Image

Learn pfSense 2.4

By: David Zientara

Overview of this book

As computer networks become ubiquitous, it has become increasingly important to both secure and optimize our networks. pfSense, an open-source router/firewall, provides an easy, cost-effective way of achieving this – and this book explains how to install and configure pfSense in such a way that even a networking beginner can successfully deploy and use pfSense. This book begins by covering networking fundamentals, deployment scenarios, and hardware sizing guidelines, as well as how to install pfSense. The book then covers configuration of basic services such as DHCP, DNS, and captive portal and VLAN configuration. Careful consideration is given to the core firewall functionality of pfSense, and how to set up firewall rules and traffic shaping. Finally, the book covers the basics of VPNs, multi-WAN setups, routing and bridging, and how to perform diagnostics and troubleshooting on a network.
Table of Contents (14 chapters)

Chapter 9

  1. Service Level Agreement (SLA).
  2. We likely did not configure DNS for the secondary WAN connection.
  3. Failure to correctly configure the monitor IP for the secondary WAN; failure to create firewall rules or to change outbound NAT rules to send traffic to the gateway group.
  4. We didn’t configure latency settings for the secondary WAN to allow for the greater amount of latency a satellite connection would have.
  5. (a) Because policy-based routing does not work with traffic that originates with pfSense, like DNS traffic. (b) Make the upstream DNS server the monitor IP, and pfSense will create an implicit static route to it.
  6. Enable State Killing on Gateway Failure.
  7. (a) Set both to Tier 1. (b) Set one to Tier 1 and one to Tier 2.
  8. (a) pfSense will think the gateway is up when it should be down. (b) The remote site’s administrator may interpret our pings an an attack and...