Book Image

pfSense 2.x Cookbook - Second Edition

By : David Zientara
Book Image

pfSense 2.x Cookbook - Second Edition

By: David Zientara

Overview of this book

pfSense is an open source distribution of the FreeBSD-based firewall that provides a platform for ?exible and powerful routing and firewalling. The versatility of pfSense presents us with a wide array of configuration options, which makes determining requirements a little more difficult and a lot more important compared to other offerings. pfSense 2.x Cookbook – Second Edition starts by providing you with an understanding of how to complete the basic steps needed to render a pfSense firewall operational. It starts by showing you how to set up different forms of NAT entries and firewall rules and use aliases and scheduling in firewall rules. Moving on, you will learn how to implement a captive portal set up in different ways (no authentication, user manager authentication, and RADIUS authentication), as well as NTP and SNMP configuration. You will then learn how to set up a VPN tunnel with pfSense. The book then focuses on setting up traffic shaping with pfSense, using either the built-in traffic shaping wizard, custom ?oating rules, or Snort. Toward the end, you will set up multiple WAN interfaces, load balancing and failover groups, and a CARP failover group. You will also learn how to bridge interfaces, add static routing entries, and use dynamic routing protocols via third-party packages.

Related Content you might be interested in

Small book image
Mastering pfSense
David Zientara
May, 2018 | 450 pages
Small book image
Learn pfSense 2.4
David Zientara
Jul, 2018 | 346 pages
Small book image
Network Security with pfSense
Manuj Aggarwal
Jul, 2018 | 152 pages
Table of Contents (18 chapters)
Title Page
Title Page
Copyright and Credits
Copyright and Credits
About Packt
About Packt
Contributors
Contributors
Preface
Preface
Free Chapter
1
Initial Configuration
Initial Configuration
Introduction
Applying basic settings to General Setup
Identifying and assigning interfaces
Configuring a WAN interface
Configuring a LAN interface
Configuring optional interfaces from the console
Enabling SSH access
Generating authorized RSA keys
Configuring SSH RSA key authentication
Accessing the SSH
Configuring VLANs
Assigning interfaces from the console
Configuring a WAN interface from the console
Configuring a LAN interface from the console
Configuring optional interfaces from the console
Configuring VLANs from the console
2
Essential Services
Essential Services
Introduction
Configuring the DHCP server
Configuring the DHCP6 server
Configuring static DHCP mappings
Configuring the DHCP relay
Specifying alternate DNS servers
Configuring the DNS resolver
Configuring a stand-alone DHCP/DNS server
Configuring dynamic DNS
Adding a wireless access point
3
Firewall and NAT
Firewall and NAT
Introduction
Creating and using aliases
Creating a firewall rule
Setting a firewall rule schedule
Creating a floating rule
Creating a NAT port forwarding entry
Creating an outbound NAT entry
Creating a 1:1 NAT entry
Creating an NPt entry
Enabling UPnP and NAT-PnP
4
Additional Services
Additional Services
Introduction
Creating a captive portal without authentication
Creating a captive portal with voucher authentication
Creating a captive portal with User Manager authentication
Creating a captive portal with RADIUS authentication
Configuring NTP
Configuring SNMP
5
Virtual Private Networking
Virtual Private Networking
Introduction
Configuring the IPsec OpenVPN server – peer-to-peer
Configuring the IPsec VPN service – client/server
Connecting to the IPsec VPN service
Configuring the OpenVPN service
Connecting to the OpenVPN service
Configuring the L2TP VPN service
6
Traffic Shaping
Traffic Shaping
Introduction
Configuring traffic shaping using the traffic-shaping wizard
Configuring traffic shaping using floating rules
Configuring traffic shaping using Snort
7
Redundancy, Load Balancing, and Failover
Redundancy, Load Balancing, and Failover
Introduction
Adding multiple WAN interfaces
Configuring server load balancing
Configuring a CARP failover group
8
Routing and Bridging
Routing and Bridging
Introduction
Bridging interfaces
Adding a static route
Configuring RIP using routed
Configuring BGP using FRR
Configuring OSPF using FRR
9
Services and Maintenance
Services and Maintenance
Introduction
Enabling Wake-on-LAN
Configuring PPPoE
Configuring external logging with a syslog server
Using ping
Using traceroute
Using netstat
Using pfTop
Using tcpdump
Using tcpflow
Backing Up and Restoring pfSense
Backing Up and Restoring pfSense
Introduction
Backing up pfSense
Restoring pfSense
Updating pfSense
Determining Hardware Requirements
Determining Hardware Requirements
Determining our deployment scenario
Determining our throughput requirements
Determining our interface requirements
Choosing a standard or embedded image
Choosing a form factor
Summary
Other Books You May Enjoy
Other Books You May Enjoy
Leave a review - let other readers know what you think
Index
Index

Creating and using aliases

This recipe describes how to create, edit, and delete aliases. Aliases provide a degree of separation between firewall/NAT rules and values that may change in the future, such as IP addresses, networks, and ports. Using aliases whenever possible makes it much easier to maintain firewall rules.

How to do it...

  1. Navigate to Firewall|Aliases.
  2. Click on theAddbutton.
  3. Enter a name for the alias in theNametext field:
  1. Enter a brief (non-parsed) description in theDescriptiontext field.
  2. Select the type of alias to create in theTypedrop-down menu (the choices areHost(s), Network(s),Port(s),URL(IPs),URL (Ports), URL Table (IPs), URL Table (Ports). The differences between these types will be explained in theThere’s moresection.
  1. Finish the configuration based on theTypeselection. ForHost(s), you should enter a host; forNetwork(s), you should enter a network and CIDR, and forPort(s), you should enter a port or port range. If you need to specify more than one entry, click on theAddbutton...
Previous Section
End of Section 3
Next Section