Posts

Showing posts from January, 2018

Allowing ports through a pfSense firewall

Image
So you want someone to login remotely to access a specific resource on your network without exposing the rest of your systems to the dangers of the internet? These are the steps to follow to either create a new port or ports from a secured Linux distribution through a firewall using pfSense while still maintaining some semblance of security. There is much more that can be done for security, so we will just cover the basics for now. To start, you will need: * The remote user's IPv4 address * Which ports will be exposed to the user's IP address * When to open and close the firewall for the user * The internal server's IPv4 address In addition, you will need the ability to make changes on: * pfSense NAT and Firewall settings, as well as aliases * pfSense Suricata, if applicable * internal server firewall settings * internal server network settings (only if server has gateway disabled) A note regarding pfSense Aliases - if this is just a one-off server &