manual firewall pfsense
TRANSCRIPT
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 1/39
NAVOMAMJ\C@NÔJ LM GNTM[COO @IJ VGPMJPM
Vit
[noamt Ctomr @cp|tnooôj
Kt}vi
02336
Njp|t}`|it
Ac}tn`ni It|nx
@mj|ti lm pmtwn`nip ~ kmp|nðj mavtmpctnc
\m`jðoiki mj clanjnp|tc`nðj lm tmlmp
Pmjc
Amlmooáj
4633
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 2/39
3
Nj|til}``nðj
Mj mp|m |tcdchi omp lctî c `iji`mt `ðai navomamj|ct ~ `ijgnk}tct }jc gntm{coo `ij vgpmjpm*
Vgpmjpm mp }jc lnp|tnd}`nðj vmtpijconxclc lm GtmmDPL clcv|cli vctc p} }pi `iai Gntm{coo ~
Ti}|mt* Pm `ctc`|mtnxc vit pmt lm `ðlnki cdnmt|i/ v}mlm pmt njp|cocli mj }jc ktcj wctnmlcl lmitlmjclitmp/ ~ clmaãp `}mj|c `ij }jc nj|mtgcx {md pmj`nooc vctc p} `ijgnk}tc`nðj
]j gntm{coo mp }jc vct|m lm }j pnp|mac i }jc tml s}m mp|ã lnpmóclc vctc dois}mct mo c``mpi ji
c}|itnxcli/ vmtan|nmjli co anpai |nmavi `ia}jn`c`nijmp c}|itnxclcp* Pm |tc|c lm }j
lnpvipn|nwi i `ijh}j|i lm lnpvipn|nwip `ijgnk}tclip vctc vmtan|nt/ onan|ct/ `ngtct/ lmp`ngtct/ mo
|tãgn`i mj|tm oip lngmtmj|mp ãadn|ip pidtm oc dcpm lm }j `ijh}j|i lm jitacp ~ i|tip `tn|mtnip*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 3/39
4
Gntm{coo mj Vgpmjpm
@iai oi bcdác ln`bi cj|mtnitamj|m mj oc nj|til}``nðj Vgpmjpm mj }j pnp|mac dcpcli mj
GtmmDPL s}m ~c wnmjm `ij }j pig|{ctm mrvon`n|i vctc pmk}tnlcl njgitaã|n`c*
Cj|mp s}m |ili lmdmaip lm njp|coct j}mp|ti Vgpmjpm* Vctc lmp`ctkc Vgpmjpm oi v}mlmp bc`mt c|tcwîp lm mp|ip onjep8 b||v8)){{{*gomrna}p*itk)anttit)vgpmjpm)li{joiclp /
b||v8))gnomp*jo*vgpmjpm*itk)anttit)li{joiclp) ~
g|v8))tmgom`|nij*j`pc*}n}`*ml})v}d)vgPmjpm)li{joiclp * Vctc pcdmt oip tms}mtnanmj|ip
aájnaip lm bctl{ctm cj|mp lm njp|coct vilmaip nt co pnk}nmj|m onje8
b||v8)){{{*vgpmjpm*itk)njlmr*vbv9iv|nij1`iaY`ij|mj|'|cpe1wnm{'nl1<='N|manl1<2 *
Ji|c8 Mp jm`mpctni |mjmt aãp lm }jc nj|mtgcx lm tml mj oc aãs}njc s}m pm wc c njp|coct Vgpmjpm*
Mj mo |tcp`}tpi lm oc njp|coc`nðj pm v}mlm `ijgnk}tct ocp lntm``nijmp nv lm ocp nj|mtgc`mp c }pct*
Mj mp|m onje omp lmhi `iai njp|coct Vgpmjpm8b||vp8))pn|mp*kiikom*`ia)c)|mtanj}pvti*`ia)nj|mtjm|)acj}comp)njp|coc`nij!lm!vgpmjpm *
Mj j}mp|ti `cpi pconaip c nj|mtjm| c |tcwîp lm oc lntm``nðj nv 36*3*3*0/ ln`bc lntm``nðj mp
cpnkjclc vit j}mp|ti vtiwmmlit lm pmtwn`nip*
Ji|c8 \ilc mp|c navomamj|c`nðj pm bc`m c |tcwîp lm wnt|}co dir ~ oc s}m bc`m p}vijmt j}mp|tc
tml [CJ pmtnc oc acs}njc tmco* Wnt|}co dir am vmtan|m |mjmt wctncp aãs}njcp `iai pn g}mtcj
tmcomp*
MP@MJCTNI C \TCDCHCT
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 4/39
0
Njktmpcaip c |tcwîp lmo jcwmkclit {md lmplm oc [CJ `ij lntm``nðj nv s}m g}m cpnkjclc vit
lb`v* Mj mp|m `cpi pm v}mlm wmt oc lntm``nðj nv lm Vgpmjpm s}m g}m cpnkjclc vit lb`v mj oc
nackmj pnk}nmj|m* Co njktmpct jip pcoltã mo pn|ni clanjnp|tc|nwi lmo Vgpmjpm*
C `ij|nj}c`nðj jip lntnknaip c oc vmp|cóc Nj|mtgc`mpvctc wmtngn`ct `}cj|cp nj|mtgc`mp |nmjm oc
aãs}njc lm Vgpmjpm* Mj mp|m `cpi |mjmaip |tmp nj|mtgc`mp ~ pm bc`mj oocact [CJ/ OCJ ~ LAX*
@clc }jc lm moocp pnkjngn`c8
OCJ8 Tml oi`co*
[CJ8 Nj|mtjm|*
LAX8 Xijc lmpanon|ctnxcli/ s}m mp lijlm |mjmaip j}mp|tip pmtwn`nip vødon`ip*
Mj oc nackmj pnk}nmj|m pm v}lm c`octct oi lm ocp nj|mtgc`mp mj mo Vgpmjpm*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 5/39
<
@tmct tmkocp lm jc|mi
Mrnp|mj lip `ocpmp lm tmkocp lm jc|mi s}m pij8
Tmkocp lm jc|mi mj VTMTI]\NJK8 S}m pij ocp am vmtan|mj tmlntm``nijct mo |tãgn`i s}m wnmjm
vctc oip pmtwn`nip s}m mp|ãj v}don`clip mj oc LAX vctc s}m oip lm i|tcp tmlmp c``mlcj c mooip*
Mhmavoi8 @}cjli lmplm oc tml [CJ s}nmtc c``mlmt co pn|ni {md lm oc mavtmpc lmdm c``mlmt c
|tcwîp lm oc lntm``nðj vødon`c ~ `}cjli mo Vgpmjpm |nmjm }jc tmkoc lm jc|mi mj vtmti}|njk s}m
ln`m |ili oi s}m wmjkc vit oc nj|mtgcx [CJ ~ |mjkc `iai lmp|nji mo pmtwnlit {md oi
tmlntm``nijm c oc lntm``nðj nv lmo pmtwnlit {md s}m mp|ã mj oc LAX*
Tmkocp lm jc|mi mj VIP\TI]J\NJK8 S}m pij ocp s}m am vmtan|mj mjacp`ctct oc tml ocj `ij
oc lntm``nðj nv v}don`c vctc s}m oip ms}nvip lm oc tml ocj v}mlcj c``mlmt c nj|mtjm| vit amlni
lmo mjacp`ctcanmj|i lm oc lntm``nðj vødon`c*
Ji|c8 `iai ji |mjmaip }jc lntm``nðj vødon`c oi s}m bc`maip mp s}m lmplm }jc aãs}njc s}m
|mjkc pconlc c nj|mtjm| `iai oi mp oc acs}njc tmco ~c s}m |nmjm }j NPV s}m om dtnjlc pconlc c
nj|mtjm|* Mo NVP |nmjm }j pmtwn`ni LB@V `ij lntm``nijcanmj|i vtnwcli s}m mp 36*3*3*6 ~ ~c mp|ã
`ijgnk}tcli vctc s}m ln`bc tml v}mlc pcont c nj|mtjm|* Vit mpi mp s}m `ioi`caip `iai
lntm``nðj v}don`c }jc lntm``nðj nv vtnwclc oc `}co g}m cpnkjclc vit mo LB@V lmo NPV*
^c |mjnmjli `octcamj|m s}m pij ocp tmkocp lm jc|mi wcaip c vti`mlmt oc tmkoc lm jc|mi mj
VIP\TI]\NJK* Jip lntnknaip c oc vmp|cóc Gntm{coo ~ lcaip `on` mj oc iv`nðj JC\*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 6/39
=
Mj Vgpmjpm ocp tmkocp lm jc|mi pm bc`mj oocact lm i|tc gitac* Vctc `tmct oc tmkoc lm
VIP\TI]\NJK lmdmaip nt c oc vmp|cóc I}|di}jl* O}mki lm mp|ct cooá pmom``nijcaip oc
pmk}jlc iv`nðj s}m cvctm`m ~ om lcaip `on` mj Pcwm* @}cjli om lcaip `on` mj Pcwm
c}|iaã|n`camj|m mo Vgpmjpm kmjmtc oc tmkoc lm jc|mi mj VIP\TI]\NJK* Oc tmkoc pm idpmtwc co
gnjco lm oc nackmj mj }j tm`}clti tihi* Ln`bi vti`mlnanmj|i pm v}mlm wmt `octcamj|m mj oc
nackmj pnk}nmj|m*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 7/39
7
O}mki lm |mjmt j}mp|tc tmkoc lm jc|mi mj VIP\TI]\NJK ji lntnknaip bc`nc }j ms}nvi lmj|ti
lm oc tml OCJ vctc vti`mlmt bc`mt vt}mdcp* Oc vt}mdc `}cjli oc tmkoc lm jc|mi mp mj
VIP\TI]\NJK mp wmtngn`ct s}m oip ms}nvip lm oc tml OCJ v}lm pcont c nj|mtjm|*
Mj oc pnk}nmj|m nackmj pm a}mp|tc }j ms}nvi `ij }j lntm``nijcanmj|i nv vtnwcli/ oi `}co
s}nmtm lm`nt s}m mp }j ms}nvi lm oc OCJ* Mp|m ms}nvi mp|ã aij|cli mj }j pnp|mac ivmtc|nwi
@mj|ip*
Mj mo ms}nvi cdtnaip mo jcwmkclit m njktmpcaip c oc vãknjc lm kiikom ~ d}p`caip coki mj
kiikom* Mj oc nackmj pm a}mp|tc `iji mo ms}nvi pn mp|ã pconmjli c nj|mtjm| mp|i s}nmtm lm`nt
s}m oc tmkoc lm jc|mi mj VIP\TI]\NJK pn mp|ã g}j`nijcjli `ittm`|camj|m*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 8/39
;
C `ij|nj}c`nðj vti`mlmaip c `tmct ocp tmkocp lm jc|mi mj VTMTI]\NJK/ s}m am wcj c
vmtan|nt mj tmlntm``nijcanmj|i lm v}mt|ip* Jip lntnknaip c oc vmp|cóc Vit| Git{ctl~ lcaip
`on` mj mo `}cltn|i s}m cvctm`mj `ij }j pnkji %/ vctc mavmxct c `tmct ocp tmkocp lm jc|mi mj
VTMTI]\NJK*
@tmctmaip vtnamti oc tmkoc lm VTMTI]\NJK vctc mo pmtwn`ni B\\VP s}m pmtác j}mp|ti pn|ni {md
pmk}ti s}m mp|ã mj oc LAX*
Vctãam|tip c `ijgnk}tct pm a}mp|tc mj oc pnk}nmj|m nackmj* ^ lijlm ln`m JC\ NV mp oc nv c
lijlm s}mtmaip lntm``nijct mo |tcgn`i B\\VP/ s}m pmtác oc nv lmo pmtwnlit {md mj oc LAX ~
lcaip `on` mj Pcwm*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 9/39
2
O}mki lm bc`mt mo vcpi cj|mtnit oip pcoltã }jc nackmj `iai oc s}m pm a}mp|tc c `ij|nj}c`nðj
s}m `ij|nmjm oc tmkoc ~ jip pcom }j clwmt|mj`nc s}m lmdmaip lm cvon`ct oip `cadnip/ mj|ij`mp
lcaip `on` mj Cvvo~ `bcjkmp ~ j}mp|tc tmkoc pmtã cvon`clc*
@iai oi lnhm cj|mtnit ocp tmkocp lm jc|mi mj VTMTI]J\NK am wcj vmtan|nt tmlntm``nijct mo
|tãgn`i lm }j pmtwn`ni bc`nc }j ms}nvi mpvm`ngn`i* Lmplm oc acs}njc tmco s}m bc`m vct|m lm oc
tml [CJ wcaip c c``mlmt co pn|ni {md vødon`i lm pm mj`}mj|tc mj oc LAX* Vctc njktmpct co pn|ni
{md lmdmaip lm njktmpct `ij oc lntm``nðj nv vødon`c* Ln`bc vm|n`nðj wc lntnknlc co Vgpmjpm ~
`iai `tmcaip }jc tmkoc lm jc|mi mj VTMTI]\NJK vctc mo vti|i`ioi B\\VP oi s}m wc bc`mt mo
Vgpmjpm mp tmlntm``nijctoi bc`nc pmtwnlit {md*
Mj oc nackmj pnk}nmj|m vilmaip wmt `octcamj|m c``mlnaip c |tcwîp lm oc nv v}don`c co pn|ni
{md s}m pm mj`}mj|tc mj oc LAX*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 10/39
>
Cbitc vctc `ijgntac s}m pn mp|caip njktmpcjli co pn|ni {md clm`}cli jip lntnknaip bc`nc mo
pmtwnlit {md/ onp|caip mo lntm``nijcanmj|i nv vctc `iavtidct s}m pn mp|ã lmj|ti lm }j lm }j
tmjki vtnwcli*
O}mki lm pcdmt oc lntm``nðj nv lmo pmtwnlit {md vti`mlmaip c c``mlmt co pn|ni {md lmplm oc
anpac acs}njc* Vctc mooi cdtnaip mo jcwmkclit ~ mj|tcaip `iai
b||vp8))lntm``nijnvlmopmtwnlit{md * @}cjli c``mlcaip co pn|ni {md jip lmdm cvctm`mt mo
anpai `ij|mjnli s}m `}cjli c``mlnaip lmplm oc tml [CJ* Pn mo `ij|mjnli mp mo anpai octmkoc pm VTMTI]\NJK pm mp|ã cvon`cjli `ittm`|camj|m* Mj oc nackmj c `ij|nj}c`nðj pm cgntac
oi cj|mtnit*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 11/39
36
Cbitc `tmctmaip i|tc tmkoc lm jc|mi mj VTMTI]\NJK* Jip lntnknaip lm j}mwi c oc vmp|cóc
Vit| Git{ctl ~ lcaip `on` mj mo `}cltn|i `ij mo pnkji %*
Mj mp|c i`cpnðj oc tmkoc lm jc|mi pmtã vctc mo pmtwnlit LJP* Vctc `tmct oc tmkoc lm jc|mi vctc mo
pmtwnlit LJP oip vctãam|tip c oomjct pij oip s}m pm a}mp|tcj mj oc nackmj pnk}nmj|m/ o}mki lm
oomjct oip vctãam|tip lcaip `on` mj Pcwm*
Lcaip `on` mj Cvvo~ `bcjkmp vctc cvon`ct oip `cadnip ~ vilmt cvon`ct oc tmkoc vctc mo mtwnlit
LJP*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 12/39
33
Vctc wmtngn`ct oc tmkoc jip wcaip vctc mo ms}nvi s}m vmt|mjm`m c oc tml [CJ ~ cdtnaip oc
`ijpioc @AL ~c s}m mj mp|m `cpi mo ms}nvi s}m vmt|mjm`m c oc tml [CJ |nmjm }j pnp|mac
ivmtc|nwi [njli{p ;* Mj oc `ijpioc @AL lnkn|caip s}m pm wmj mj oc nackmj pnk}nmj|m ~ mp|ãj
mj }j tm`}clti tihi* @}cjli wc~caip c lct mo `iacjli pmtwmt lmdmaip lm `ioi`ct oc
lntm``nðj nv lm oc s}m pm bc`m vcpct vit lntm``nðj vødon`c mj mp|m `cpi 36*3*3*0 s}m mp oc
lntm``nðj nv s}m |nmjm mj Vgpmjpm* Pn jip tmp}mowm `ittm`|camj|m mp vits}m oc tmkoc pm mp|ã
cvon`cjli dnmj* Pn vilmaip wmt mj oc nackmj `}cjli tmpiowmaip }j jiadtm îo jip wc c
aip|tct oc lntm``nðj nv ~ mo jiadtm lmo pmtwnlit lmo pmtwnlit LJP*
Wcaip c tmconxct oi anpai vctc `tmct oc tmkoc lm jc|mi mj VTMTI]\NJK vctc mo pmtwnlit PA\V
s}m pmtác mo pmtwnlit lm `ittmi s}m mp|ã mj oc LAX* Jip lntnknaip c oc vmp|cóc Vit| Git{ctl ~
lcaip `on` mj mo tm`}clti `ij mo pnkji% s}m cvctm`m co gnjco*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 13/39
34
Oip vctãam|tip c oomjct vctc oc tmkoc lm jc|mi vctc mo pmtwnlit PA\V pm a}mp|tcj mj oc
pnk}nmj|m nackmj* O}mki lm oomjct oip vctãam|tip k}ctlcaip oip `cadnip*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 14/39
30
Lcaip `on` mj Cvvo~ `bcjkmp vctc cvon`ct oi `cadnip mj oc tmkocp lm jc|mi*
Lmplm mo ms}nvi s}m pm mj`}mj|tc mj oc [CJ mj|tcaip c oc `ijpioc @AL ~ wcaip c tmconxct }j
|mojm| vctc wmtngn`ct s}m pn bcooc }j pmtwnlit lm `ittmi ~ pn pm mp|î tmlntm``nijcjli co pmtwnlit
lm `ittmi* ]|nonxcaip mo `iacjli `iai oi a}mp|tc oc nackmj* Vctãam|tip8
\mojm|8 `iacjli c mhm`}|ct
36*3*3*08 lntm``nðj nv lmo pmtwnlit PA\V " Mp|c mp oc lntm``nðj vødon`c s}m `}cjli mj vgpmjpm
tm`ndc oc vm|n`nðj PA\V oc tmlntm``nijm c oc nv 3>4*372*366*36.*
4=8 v}mt|i lmo pmtwnlit PA\V*
Pn |ili mp|ã dnmj jip lmdm cvctm`mt coki cpá `iai mj oc nackmj* \cadnîj mhm`}|m mo `iacjli
s}m mj }j tm`}clti tihi vctc cpmk}tctam s}m mo pmtwnlit lm `ittmi mp|m g}j`nijcjli*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 15/39
3<
C `ij|nj}c`nðj wcaip c vti`mlmt c tmconxct oi anpai s}m bmaip wmjnli bc`nmjli vmti mp|c
wmx pmtã vctc mo pmtwnlit VIV0* Jip lntnknaip c oc vmp|cóc Vit| git{ctl~ lcaip `on` mj mo
`}cltn|i `ij mo pnkji %*
Oomjcaip oip `cavip lm nk}co acjmtc s}m pm a}mp|tc mj oc nackmj pnk}nmj|m vctc kmjmtct oc
tmkoc lm jc|mi vctc mo pmtwnlit VIV0 ~ k}ctlcaip*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 16/39
3=
Cvon`caip oip `cadnip mj ocp tmkocp lm jc|mi*
Lm j}mwi jip lntnknaip c oc aãs}njc s}m mp|ã mj oc [CJ ~ cdtnaip oc `ijpioc @AL ~
mhm`}|caip mo `iacjli |mojm| 36*3*3*0 336* Ln`bi `iacjli oi mrvons}m cj|mtnitamj|m*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 17/39
37
Pn |ili mp|ã dnmj jip lmdm cvctm`mt oi anpai s}m pm wm mj oc nackmj pnk}nmj|m*
@tmct tmkocp mj mo gntm{coo
@iai oi lnhm cj|mtnit mj oc nj|til}``nðj }j gntm{coo mp momamj|i lmj|ti lm }jc tml lnpmóclc
vctc dois}mct c``mpip ji c}|itnxclip* ]ji lm oip `it|cg}mkip acp }|nonxclip mj mo gntm{coo lm
gno|tcli lm vcs}m|mp*
]j gntm{coo |nmjm `iai g}j`nðj lmjmkct i vmtan|nt c``mpip*
Mj mp|c i`cpnðj wcaip c navomamj|ct }j gntm{coo mj vgpmjpm* Mj pn|ni {md s}m |tcm vgpmjpm
vctc clanjnp|tct wcaip c oc vmp|cóc Gntm{coo ~ pmom``nijcaip oc iv`nðj T}omp vctc mavmxct c`tmct tmkocp lm gno|tclit lm vcs}m|mp*
Pmom``nijcaip oc vmp|cóc [CJ vctc mavmxct c `tmct tmkocp lmo |tcgn`i lm wnmjm lmplm
nj|mtjm|* @}cjli pmom``nijcaip mp|c vmp|cóc jip wcj c cvctm`mt }jcp tmkocp s}m g}mtij
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 18/39
3;
`tmclcp c}|iaã|n`camj|m `}cjli mp|ãdcaip `tmcli ocp tmkocp lm jc|mi mj VTMTI]\NJK* Oc
vtnamtc tmkoc mj mp|m `cpi mp oc vit lmgm`|i ~ mp|c mj vmtan|nt |ili vmti acp clmocj|m oc
wcaip c `ioi`ct mj lmjmkct vit lmgm`|i ~ jclc acp pm wc c`mv|ct mo |tcgn`i lm ocp tmkocp s}m
mp|îj vmtan|nlcp mrvoá`n|camj|m*
Pn `ioi`caip oc tmkoc vit lmgm`|i mj lmjmkct oc lmdmaip lm `ioi`ct vtnamti vctc s}m ocp i|tcp
tmkocp lm gno|tcli lm vcs}m|mp mp|ãj mj c`mv|ct pm `}avocj*
Mp|i jip cbitti |tcdchi ~c s}m vgpmjpm oc tm`iji`m `iai pn ocp tmkocp s}m jc|mi mj
VTMTI]\NJK s}m wnmjm lmplm oc [CJ bc`nc oc LAX pij oip øjn`ip c``mpip s}m wc c vmtan|nt mo
gntm{coo lmplm oc [C*
Cbitc oi s}m bctmaip mj `tmct }jc tmkoc vctc aip|tct `iai pm `tmcj* Oc tmkoc c `tmct wc bc`mt
vctc c``mlmt lmplm oc [CJ c |tcwîp lmo vti|i`ioi B\\V mo c``mpi co pn|ni {md lm
clanjnp|tc`nðj lmo vgpmjpm* Vctc `tmct oc tmkoc pioi dcp|c `ij lct `on` mj mo `}cltn|i s}m
`ij|nmjm }j pnkji % mj oc vct|m njgmtnit lmtm`bc co gnjco*
Oip vctãam|tip c `ijgnk}tct vctc vmtan|nt mo c``mpi co pn|ni {md lm clanjnp|tc`nðj lmo vgpmjpmc |tcwîp lmo vti|i`ioi B\\V pm a}mp|tcj mj oc pnk}nmj|m nackmj*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 19/39
32
O}mki lm tmconxct mo vcpi cj|mtnit ~ bcdmt k}ctlcli jip wc c vctm`mt }jc nackmj `ij oc
pnk}nmj|m lijlm wcaip c lct `on` mj Cvvo~ `bcjkmp vctc s}m oip `cadnip pmcj cvon`clip* Co
cvon`ct oip `cadnip jip wc c cvctm`mt oc tmkoc `tmclc co gnjco*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 20/39
3>
C `ij|nj}c`nij vti`mlmtmaip c dittct oc tmkoc vit lmgm`|i s}m mp|c mj vmtan|nt |ili mo |tcgn`i*
Vctc mooi `b}omcaip oc tmkoc vit lmgm`|i ~ co gtmj|m cvctm`m }j `}cltn|i `ij oc om|tc R/ dcp|c
`ij pioi lct `on` coon onp|i*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 21/39
46
O}mki lm bc`mt mo vcpi cj|mtnit lcaip `on` mj Cvvo~ `cbjkmp vctc cvon`ct oip `cadnip lm ocp
tmkocp*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 22/39
43
Vti`mlmaip c `tmct oc tmkoc vit lmgm`|i mj lmjmkct |ili/ ln`bc tmkoc bc~ s}m `tmctoc co gnjco*
Vctc `tmct oc tmkoc ~ s}m s}mlm co gnjco lcaip `on` mj mo `}cltn|i `ij mo pnkji % s}m cvctm`m co
gnjco lm oc nackmj mj oc vct|m njgmtnit lmtm`bc*
Oip vctcam|tip vctc `ijgnk}tct oc tmkoc vit lmgm`|i mj lmjmkct |ili pm a}mp|tc mj oc
pnk}nmj|mp lip naãkmjmp ~ co gnjc lcaip `on` mj Pcwm*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 23/39
44
Vctc cvon`ct oip `cadnip mj ocp tmkocp lcaip `on` mj Cvvo~ `bcjkmp*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 24/39
40
Vti`mlmaip c tmonxct }jc vt}mdc/ mj mp|m `cpi wcaip c tmconxct oc vt}dm `ij }j vnjk* Jip
lntnknaip c oc acs}njc tmco s}m bc`m vct|m lm oc tml [CJ/ cdtnaip oc `ijpioc @AL ~ onp|caip
oc `ijgnk}tc`nij nv lm oc acs}njc*
^c pcdnmjli oc nv lm oc acs}njc wcaip c lctom vnjk c oc lntm``nij nv v}don`c s}m |nmjm mj
vgpmjpm*
Ji|c8 Tm`}mtlmj s}m oc oocacaiip nv v}don`c c ln`bc nv vit s}m c|tcwmp lm mpc mp s}m pconaip
c nj|mtjm| ~ ln`bc nv pcom c nj|mtjm| ktc`ncp co NPV*
Mj oc pnk}nmj|m nackmj mo vnjk mp gtc`cxcli ~c s}m ji bc~ }jc tmkoc mj mo gntm{coo s}m vmtan|c
s}m om bckcj vnjk co vgpmjpm*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 25/39
4<
Cbitc oi s}m wcaip bc`mt mp c vmtan|nt mo vnjk lmplm oc [CJ bc`nc mj vgpmjpm* Vctc mooi jip
lntnknaip c pn|ni {md clanjnp|tc|nwi lmo vgpmjpm ~ jip lntnknaip c oc vmp|cóc Gntm{coo ~
pmom``nijcaip T}omp*
Cbitc lcaip `on` mj mo `}cltn|i s}m |nmjm mo pnkji % co vtnj`nvni s}m mp|c }dn`cli mj oc vct|m
p}vmtnit lmtm`bc ~ mp|c mj`mttcli mj }j `}clti tihi vctc cóclnt oc tmkoc s}m vmtan|c mo vnjk*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 26/39
4=
Vctc vmtan|nt mo vnjk lmplm oc tml [CJ oomjcaip oip vctma|tip `iai oi a}mp|tc ocp lip
nackmjmp pnk}nmj|mp ~ lcaip `on` mj Pcwm*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 27/39
47
Pmom``nijcaip Cvvo~ `bcjkmp vctc cvon`ct oip `cadnip m`bip mj ocp tmkocp*
Jip lntnknaip lm j}mwi c oc acs}njc tmco vctc wiowmt c tmconxct oc vt}mdc lmo vnjk* Pn vilmaip
wmt mj oc nackmj pnk}nmj|m mo vnjk mp pc|npgc`|itni mpi s}nmtm lm`nt s}m oc tmkoc lm pn mp|c
cvon`cjli*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 28/39
4;
Cbitc wcaip c vti`mlmt c `tmct tmkocp mj oc LAX/ jip lntnknaip c oc vmp|cóc LAX* Oi vtnamti
s}m wcaip c tmconxct mp mln|ct s}m tmkoc s}m wnmjm vit lmgm`|i mj vmtan|nt |ili ~ oc wcaip c
`ioi`ct mj lmjckct |ili*
Mj oc vct|m lmtm`bc lm oc nackmj cvctm`m }j `}cltn|i `ij oc om|tc m ~ mp|c mj }j tm`}clti tihi/
lcaip `on` coon vctc mln|ct oc tmkoc*
Oip vctcam|tip vctc `ioi`ct oc tmkoc mj lmjmkct |ili cvctm`m mj ocp lip pnk}nmj|mp naãkmjmp ~
co gnjc lcaip `on` mj Pcwm vctc k}ctlct oip `cadnip*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 29/39
42
Vctc cvon`ct oip `cadnip lcaip `on` mj Cvvo~ `bcjkmp ~ vilmaip idpmtwct s}m oc tmkoc c
`cadncli ̀ ittm`|camj|m*
Cbitc wcaip c vti`mlmt c `tmct }jc tmkoc s}m pm om wc c vmtan|nt c oc tml LAX pcont c |ili
bc`nc oc tml [CJ* Jip lntnknaip c mo `}cltn|i `ij mo pnkji % s}m cvtm`m co vtnj`nvni mj oc vct|mlmtm`bc lm oc nackmj*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 30/39
4>
Vctc vmtan|nt s}m pcoki |ili mo |tcgn`i lm oc LAX bc`nc nj|mtjm| oip vctcam|tip c `ijgnk}tct mj
oc tmkoc lm a}mp|tcj c `ij|nj}c`nij mj ocp lip pnk}nmj|mp naãkmjmp*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 31/39
06
Lcaip `on` mj Cvvo~ `bcjkmp ~ wmtmaip c tmkoc `tmclc mj mo vcpi cj|mnit*
C `ij|nj}c`nij `tmctmaip }jc tmkoc vctc vmtan|nt mo vnjk lmplm oc LAX bc`nc oc anpac LAX
mp|i am wc c vmtan|nt vtidct `ijm`|nlcl lmj|ti lm oc anpac tml ~ mp acp am wc vmtan|nt lctom
vnjk c oc v}mt|c lm mjoc`m lm oc LAX* Jip lntnknaip co tm`}clti s}m `ij|nmjm }j pnkji % vctc
cóclnt oc j}mwc tmkoc*
Vctc cóclnt oc tmkoc lm vnjk mj oc anpac LAX oip vctcam|ti c `ijgnk}tct mj oc tmkoc pm v}mlmj
idpmtwct mj ocp lip pnk}nmj|mp naãkmjmp*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 32/39
03
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 33/39
04
Lcaip `on` mj Cvvo~ `bcjkmp ~ viltmaip wmt oc tmkoc `tmclc mj mo vcpi cj|mtnit*
Bctmaip vt}mdcp lcjliom vnjk c oc v}mt|c lm mjoc`m lm oc LAX ~ lcaiom vnjk c oc v}mt|c lm
mjoc`m lmo gntm{coo s}m mj mp|m `cpi mp oc nv s}m |nmjm c``mpi c nj|mtjm|* Mj oc pnk}nmj|m nackmj
pm idpmtwc s}m oip vnjk pij pc|npgc`|itnip* Lmplm oc LAx om v}mlmj lct vnjk c `}cos}nmt ms}nvi
lm oc [CJ vit s}m pm om mp|c vmtan|nmjli |ili mo |tcgn`i bc`nc oc [CJ*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 34/39
00
Mj oc nackmj s}m pnk}m pm a}mp|tc s}m lmplm op tml LAX ji pm om v}mlc lct vnjk c jnjk}j
bip|p lm oc tml OCJ ~c s}m cj|mtnitamj|m ji pm mpvm`ngn`i s}m oc LAX om vilnc lct vnjk c
`}cos}nmt bip|p lm oc OCJ*
Oc tmkoc vit lmgm`|i mj oc tml OCJ mp vmtan|nt |ili |tcgn`i bc`nc ocp i|tcp tmlmp s}m pij o tml
LAX ~ oc [CJ* Ji pm a}mp|tc mj }jc nackmj vit s}m vit lmgm`|i wnmjm cpn*
Mj oc nackmj pnk}nmj|m pm a}mp|tc mo pn|ni {md lm oc tml OCJ*
Cbitc oi s}m wcaip c bc`mt mp tmconxct oc vt}mdc lmplm oc LAX ~ wmtngn`ct s}m lmplm oc LAX ji
pm v}mlm c``mlmt co pn|ni {md lm oc OCJ ~c s}m ji bc~ }jc tmkoc s}m oi vmtan|mtc lmplm oc
LAX* @ia ipm idpmtwc mj oc nackmj ji pm v}mdm mp|cdom`mt }jc `ijmrnðj `ij mo pmtwnlit {md
lm oc tml OCJ*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 35/39
0<
Jip lntnknaip c oc acs}njc s}m mp|c mj oc tml OCJ ~ tmconxct oc vt}mdc s}m lmplm `}cs}nmt
ms}nvi lm oc tml Ocj pn v}mlm c``mlmt c oc pn|ni {md lm oc tml LAX* Pm v}mlm idpmtwct mj oc
nackmj pnk}nmj|m s}m pn pm v}li c``mlmt co pn|ni {md lm oc LAX*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 36/39
0=
Lmplm oc anpac acs}njc lm oc OCJ wcaip c vtidct oip pmtwn`nip PA\V/ VIV0 ~ LJP ~ oc
`ijm`|nwnlcl c |tcwmp lmo vnjk*
]|nonxcaip mo `iacjli |mojm| ~ oc lntm``nij nv lmo pmtwnlit s}m `ij|nmjm oip pmtwn`nip ln`bipcj|mtnit ~ co gnjco lmo `iacjli `ioi`caip mo v}mt|i vit lijlm mp`}`bc mo pmtwn`ni*
Mp|c mj oc vt}mdc `ij mo pmtwnlit PA\V i `ittmi ~mp pc|npgc`|itnc*
Mp|c mp oc vt}mdc `ij mo pmtwnlit VIV0 ~ mp pc|npgc`|itnc*
Vctc bc`mt oc vt}mdc lmo LJP }|nonxcaip oip `iacjli aip|tclip mj mo tm`}clti tihi lm oc
nackmj pnk}nmj|m* Vit `clc `iacjli pm lc mj|mt ~ co gnjco pm tmp}owm }j jiadtm s}m mp|m mj
pmtwnlit LJP*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 37/39
07
Cbitc vtidctmaip s}m lmplm oc tml OCJ pm v}mlm vtidct `ijm`|nwclcp `ij ocp tmlmp [CJ/LAX ~ oc anpac OCJ*
Lmplm oc `ijpioc onp|caip oc `ijgnk}tc`nij nv lm oc acs}njc vctc wmtngn`ct s}m pn mp }j ms}nvi
lm oc OCJ*
Cbitc vtidcaip vnjk `ij `clc }jc lm ocp lntm``nijmp nv s}m mp|cj mj ̀ clc }jc lm ocp tmlmp*
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 38/39
0;
5/6/2018 Manual Firewall Pfsense - slidepdf.com
http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 39/39
02
@IJ@O]PNIJMP
Ocp tmkocp lm jc|mi am wcj c vmtan|nt tmlntm``nijct mo |tãgn`i mj|tcj|m ~
mjacp`ctcanmj|i lm nv* Mrnp|mj lip |nvip lm tmkocp vctc jc|mi s}m pij 8 VTMTI]\NJKs}m pij ocp s}m am vmtan|nt mo tmlntm``nijcanmj|i lmo |tcgn`i mj|tcj|m ~ ocp tmkocp lm
jc|mi mj VIP\TI]\NJK s}m pij ocp s}m am vmtan|mj mjacp`ctct an tml OCJ `ij oc
lntm``nðj nv v}don`c ~ cpá oc tml ocj v}mlc pcont c nj|mtjm|*
]j gntm{coo am wc vmtan|nt `ij|tioct |ili mo |tãgn`i s}m pm wc c |tcpan|nt lm }jc tml c
i|tc tml `ij tmkocp lm vmtan|nt i lmjmkct* Ocp g}j`nijmp lm }j gntm{coo pij ocp lm
vmtan|nt i lmjmkct mo |tãgn`i*
Co navomamj|ct }j momamj|i pm tml `iai oip mp mo gntm{coo pm wc c dtnjlct aãp
pmk}tnlcl vctc oc tml* ^c s}m v}mlm `ij|tioct mo |tãgn`i lij mo gntm{coo ~ cpá pmtãj
amjip ocp vipndnonlclmp lm c|cs}mp c bc`nc an tml*