Manual Firewall Pfsense

39
 @HZIKHKMQGF@ÓM AK L@SKRGII FOM ZLVKMVK Zor R`ihkr Grikx Fgstr`iióm Brupo 6>77: @mstruftor Hgur`f`o Ort`z Fkmtro ak skrv`f`os y bkst`öm khprksgr`g Qkfmöiobo km gah`m`strgf`öm ak rkaks Vkmg Hkakiièm 3:77

Transcript of Manual Firewall Pfsense

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 1/39

 

 

NAVOMAMJ\C@NÔJ LM GNTM[COO @IJ VGPMJPM

Vit

[noamt Ctomr @cp|tnooôj

Kt}vi

02336

Njp|t}`|it

Ac}tn`ni It|nx

@mj|ti lm pmtwn`nip ~ kmp|nðj mavtmpctnc

\m`jðoiki mj clanjnp|tc`nðj lm tmlmp

Pmjc

Amlmooáj

4633

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 2/39

 

 

3

Nj|til}``nðj

Mj mp|m |tcdchi omp lctî c `iji`mt `ðai navomamj|ct ~ `ijgnk}tct }jc gntm{coo `ij vgpmjpm*

Vgpmjpm mp }jc lnp|tnd}`nðj vmtpijconxclc lm GtmmDPL clcv|cli vctc p} }pi `iai Gntm{coo ~

Ti}|mt* Pm `ctc`|mtnxc vit pmt lm `ðlnki cdnmt|i/ v}mlm pmt njp|cocli mj }jc ktcj wctnmlcl lmitlmjclitmp/ ~ clmaãp `}mj|c `ij }jc nj|mtgcx {md pmj`nooc vctc p} `ijgnk}tc`nðj

]j gntm{coo mp }jc vct|m lm }j pnp|mac i }jc tml s}m mp|ã lnpmóclc vctc dois}mct mo c``mpi ji

c}|itnxcli/ vmtan|nmjli co anpai |nmavi `ia}jn`c`nijmp c}|itnxclcp* Pm |tc|c lm }j

lnpvipn|nwi i `ijh}j|i lm lnpvipn|nwip `ijgnk}tclip vctc vmtan|nt/ onan|ct/ `ngtct/ lmp`ngtct/ mo

|tãgn`i mj|tm oip lngmtmj|mp ãadn|ip pidtm oc dcpm lm }j `ijh}j|i lm jitacp ~ i|tip `tn|mtnip*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 3/39

 

 

4

Gntm{coo mj Vgpmjpm 

@iai oi bcdác ln`bi cj|mtnitamj|m mj oc nj|til}``nðj Vgpmjpm mj }j pnp|mac dcpcli mj

GtmmDPL s}m ~c wnmjm `ij }j pig|{ctm mrvon`n|i vctc pmk}tnlcl njgitaã|n`c*

Cj|mp s}m |ili lmdmaip lm njp|coct j}mp|ti Vgpmjpm* Vctc lmp`ctkc Vgpmjpm oi v}mlmp bc`mt c|tcwîp lm mp|ip onjep8 b||v8)){{{*gomrna}p*itk)anttit)vgpmjpm)li{joiclp  /

b||v8))gnomp*jo*vgpmjpm*itk)anttit)li{joiclp) ~

g|v8))tmgom`|nij*j`pc*}n}`*ml})v}d)vgPmjpm)li{joiclp  * Vctc pcdmt oip tms}mtnanmj|ip

aájnaip lm bctl{ctm cj|mp lm njp|coct vilmaip nt co pnk}nmj|m onje8

b||v8)){{{*vgpmjpm*itk)njlmr*vbv9iv|nij1`iaY`ij|mj|'|cpe1wnm{'nl1<='N|manl1<2 *

Ji|c8 Mp jm`mpctni |mjmt aãp lm }jc nj|mtgcx lm tml mj oc aãs}njc s}m pm wc c njp|coct Vgpmjpm*

Mj mo |tcp`}tpi lm oc njp|coc`nðj pm v}mlm `ijgnk}tct ocp lntm``nijmp nv lm ocp nj|mtgc`mp c }pct*

Mj mp|m onje omp lmhi `iai njp|coct Vgpmjpm8b||vp8))pn|mp*kiikom*`ia)c)|mtanj}pvti*`ia)nj|mtjm|)acj}comp)njp|coc`nij!lm!vgpmjpm *

Mj j}mp|ti `cpi pconaip c nj|mtjm| c |tcwîp lm oc lntm``nðj nv 36*3*3*0/ ln`bc lntm``nðj mp

cpnkjclc vit j}mp|ti vtiwmmlit lm pmtwn`nip*

Ji|c8 \ilc mp|c navomamj|c`nðj pm bc`m c |tcwîp lm wnt|}co dir ~ oc s}m bc`m p}vijmt j}mp|tc

tml [CJ pmtnc oc acs}njc tmco* Wnt|}co dir am vmtan|m |mjmt wctncp aãs}njcp `iai pn g}mtcj

tmcomp*

MP@MJCTNI C \TCDCHCT

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 4/39

 

 

0

Njktmpcaip c |tcwîp lmo jcwmkclit {md lmplm oc [CJ `ij lntm``nðj nv s}m g}m cpnkjclc vit

lb`v* Mj mp|m `cpi pm v}mlm wmt oc lntm``nðj nv lm Vgpmjpm s}m g}m cpnkjclc vit lb`v mj oc

nackmj pnk}nmj|m* Co njktmpct jip pcoltã mo pn|ni clanjnp|tc|nwi lmo Vgpmjpm*

C `ij|nj}c`nðj jip lntnknaip c oc vmp|cóc Nj|mtgc`mpvctc wmtngn`ct `}cj|cp nj|mtgc`mp |nmjm oc

aãs}njc lm Vgpmjpm* Mj mp|m `cpi |mjmaip |tmp nj|mtgc`mp ~ pm bc`mj oocact [CJ/ OCJ ~ LAX*

@clc }jc lm moocp pnkjngn`c8

OCJ8 Tml oi`co*

[CJ8 Nj|mtjm|*

LAX8 Xijc lmpanon|ctnxcli/ s}m mp lijlm |mjmaip j}mp|tip pmtwn`nip vødon`ip*

Mj oc nackmj pnk}nmj|m pm v}lm c`octct oi lm ocp nj|mtgc`mp mj mo Vgpmjpm*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 5/39

 

 

<

@tmct tmkocp lm jc|mi

Mrnp|mj lip `ocpmp lm tmkocp lm jc|mi s}m pij8

Tmkocp lm jc|mi mj VTMTI]\NJK8 S}m pij ocp am vmtan|mj tmlntm``nijct mo |tãgn`i s}m wnmjm

vctc oip pmtwn`nip s}m mp|ãj v}don`clip mj oc LAX vctc s}m oip lm i|tcp tmlmp c``mlcj c mooip*

Mhmavoi8 @}cjli lmplm oc tml [CJ s}nmtc c``mlmt co pn|ni {md lm oc mavtmpc lmdm c``mlmt c

|tcwîp lm oc lntm``nðj vødon`c ~ `}cjli mo Vgpmjpm |nmjm }jc tmkoc lm jc|mi mj vtmti}|njk s}m

ln`m |ili oi s}m wmjkc vit oc nj|mtgcx [CJ ~ |mjkc `iai lmp|nji mo pmtwnlit {md oi

tmlntm``nijm c oc lntm``nðj nv lmo pmtwnlit {md s}m mp|ã mj oc LAX*

Tmkocp lm jc|mi mj VIP\TI]J\NJK8 S}m pij ocp s}m am vmtan|mj mjacp`ctct oc tml ocj `ij

oc lntm``nðj nv v}don`c vctc s}m oip ms}nvip lm oc tml ocj v}mlcj c``mlmt c nj|mtjm| vit amlni

lmo mjacp`ctcanmj|i lm oc lntm``nðj vødon`c*

Ji|c8 `iai ji |mjmaip }jc lntm``nðj vødon`c oi s}m bc`maip mp s}m lmplm }jc aãs}njc s}m

|mjkc pconlc c nj|mtjm| `iai oi mp oc acs}njc tmco ~c s}m |nmjm }j NPV s}m om dtnjlc pconlc c

nj|mtjm|* Mo NVP |nmjm }j pmtwn`ni LB@V `ij lntm``nijcanmj|i vtnwcli s}m mp 36*3*3*6 ~ ~c mp|ã

`ijgnk}tcli vctc s}m ln`bc tml v}mlc pcont c nj|mtjm|* Vit mpi mp s}m `ioi`caip `iai

lntm``nðj v}don`c }jc lntm``nðj nv vtnwclc oc `}co g}m cpnkjclc vit mo LB@V lmo NPV*

^c |mjnmjli `octcamj|m s}m pij ocp tmkocp lm jc|mi wcaip c vti`mlmt oc tmkoc lm jc|mi mj

VIP\TI]\NJK* Jip lntnknaip c oc vmp|cóc Gntm{coo ~ lcaip `on` mj oc iv`nðj JC\*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 6/39

 

 

=

Mj Vgpmjpm ocp tmkocp lm jc|mi pm bc`mj oocact lm i|tc gitac* Vctc `tmct oc tmkoc lm

VIP\TI]\NJK lmdmaip nt c oc vmp|cóc I}|di}jl* O}mki lm mp|ct cooá pmom``nijcaip oc

pmk}jlc iv`nðj s}m cvctm`m ~ om lcaip `on` mj Pcwm* @}cjli om lcaip `on` mj Pcwm

c}|iaã|n`camj|m mo Vgpmjpm kmjmtc oc tmkoc lm jc|mi mj VIP\TI]\NJK* Oc tmkoc pm idpmtwc co

gnjco lm oc nackmj mj }j tm`}clti tihi* Ln`bi vti`mlnanmj|i pm v}mlm wmt `octcamj|m mj oc

nackmj pnk}nmj|m*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 7/39

 

 

7

O}mki lm |mjmt j}mp|tc tmkoc lm jc|mi mj VIP\TI]\NJK ji lntnknaip bc`nc }j ms}nvi lmj|ti

lm oc tml OCJ vctc vti`mlmt bc`mt vt}mdcp* Oc vt}mdc `}cjli oc tmkoc lm jc|mi mp mj

VIP\TI]\NJK mp wmtngn`ct s}m oip ms}nvip lm oc tml OCJ v}lm pcont c nj|mtjm|*

Mj oc pnk}nmj|m nackmj pm a}mp|tc }j ms}nvi `ij }j lntm``nijcanmj|i nv vtnwcli/ oi `}co

s}nmtm lm`nt s}m mp }j ms}nvi lm oc OCJ* Mp|m ms}nvi mp|ã aij|cli mj }j pnp|mac ivmtc|nwi

@mj|ip*

Mj mo ms}nvi cdtnaip mo jcwmkclit m njktmpcaip c oc vãknjc lm kiikom ~ d}p`caip coki mj

kiikom* Mj oc nackmj pm a}mp|tc `iji mo ms}nvi pn mp|ã pconmjli c nj|mtjm| mp|i s}nmtm lm`nt

s}m oc tmkoc lm jc|mi mj VIP\TI]\NJK pn mp|ã g}j`nijcjli `ittm`|camj|m*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 8/39

 

 

;

C `ij|nj}c`nðj vti`mlmaip c `tmct ocp tmkocp lm jc|mi mj VTMTI]\NJK/ s}m am wcj c

vmtan|nt mj tmlntm``nijcanmj|i lm v}mt|ip* Jip lntnknaip c oc vmp|cóc Vit| Git{ctl~ lcaip

`on` mj mo `}cltn|i s}m cvctm`mj `ij }j pnkji %/ vctc mavmxct c `tmct ocp tmkocp lm jc|mi mj

VTMTI]\NJK*

@tmctmaip vtnamti oc tmkoc lm VTMTI]\NJK vctc mo pmtwn`ni B\\VP s}m pmtác j}mp|ti pn|ni {md

pmk}ti s}m mp|ã mj oc LAX*

Vctãam|tip c `ijgnk}tct pm a}mp|tc mj oc pnk}nmj|m nackmj* ^ lijlm ln`m JC\ NV mp oc nv c

lijlm s}mtmaip lntm``nijct mo |tcgn`i B\\VP/ s}m pmtác oc nv lmo pmtwnlit {md mj oc LAX ~

lcaip `on` mj Pcwm* 

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 9/39

 

 

2

O}mki lm bc`mt mo vcpi cj|mtnit oip pcoltã }jc nackmj `iai oc s}m pm a}mp|tc c `ij|nj}c`nðj

s}m `ij|nmjm oc tmkoc ~ jip pcom }j clwmt|mj`nc s}m lmdmaip lm cvon`ct oip `cadnip/ mj|ij`mp

lcaip `on` mj Cvvo~ `bcjkmp ~ j}mp|tc tmkoc pmtã cvon`clc*

@iai oi lnhm cj|mtnit ocp tmkocp lm jc|mi mj VTMTI]J\NK am wcj vmtan|nt tmlntm``nijct mo

|tãgn`i lm }j pmtwn`ni bc`nc }j ms}nvi mpvm`ngn`i* Lmplm oc acs}njc tmco s}m bc`m vct|m lm oc

tml [CJ wcaip c c``mlmt co pn|ni {md vødon`i lm pm mj`}mj|tc mj oc LAX* Vctc njktmpct co pn|ni

{md lmdmaip lm njktmpct `ij oc lntm``nðj nv vødon`c* Ln`bc vm|n`nðj wc lntnknlc co Vgpmjpm ~

`iai `tmcaip }jc tmkoc lm jc|mi mj VTMTI]\NJK vctc mo vti|i`ioi B\\VP oi s}m wc bc`mt mo

Vgpmjpm mp tmlntm``nijctoi bc`nc pmtwnlit {md*

Mj oc nackmj pnk}nmj|m vilmaip wmt `octcamj|m c``mlnaip c |tcwîp lm oc nv v}don`c co pn|ni

{md s}m pm mj`}mj|tc mj oc LAX*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 10/39

 

 

>

Cbitc vctc `ijgntac s}m pn mp|caip njktmpcjli co pn|ni {md clm`}cli jip lntnknaip bc`nc mo

pmtwnlit {md/ onp|caip mo lntm``nijcanmj|i nv vctc `iavtidct s}m pn mp|ã lmj|ti lm }j lm }j

tmjki vtnwcli*

O}mki lm pcdmt oc lntm``nðj nv lmo pmtwnlit {md vti`mlmaip c c``mlmt co pn|ni {md lmplm oc

anpac acs}njc* Vctc mooi cdtnaip mo jcwmkclit ~ mj|tcaip `iai

b||vp8))lntm``nijnvlmopmtwnlit{md  * @}cjli c``mlcaip co pn|ni {md jip lmdm cvctm`mt mo

anpai `ij|mjnli s}m `}cjli c``mlnaip lmplm oc tml [CJ* Pn mo `ij|mjnli mp mo anpai octmkoc pm VTMTI]\NJK pm mp|ã cvon`cjli `ittm`|camj|m* Mj oc nackmj c `ij|nj}c`nðj pm cgntac

oi cj|mtnit*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 11/39

 

 

36

Cbitc `tmctmaip i|tc tmkoc lm jc|mi mj VTMTI]\NJK* Jip lntnknaip lm j}mwi c oc vmp|cóc

Vit| Git{ctl ~ lcaip `on` mj mo `}cltn|i `ij mo pnkji %*

Mj mp|c i`cpnðj oc tmkoc lm jc|mi pmtã vctc mo pmtwnlit LJP* Vctc `tmct oc tmkoc lm jc|mi vctc mo

pmtwnlit LJP oip vctãam|tip c oomjct pij oip s}m pm a}mp|tcj mj oc nackmj pnk}nmj|m/ o}mki lm

oomjct oip vctãam|tip lcaip `on` mj Pcwm*

Lcaip `on` mj Cvvo~ `bcjkmp vctc cvon`ct oip `cadnip ~ vilmt cvon`ct oc tmkoc vctc mo mtwnlit

LJP*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 12/39

 

 

33

Vctc wmtngn`ct oc tmkoc jip wcaip vctc mo ms}nvi s}m vmt|mjm`m c oc tml [CJ ~ cdtnaip oc

`ijpioc @AL ~c s}m mj mp|m `cpi mo ms}nvi s}m vmt|mjm`m c oc tml [CJ |nmjm }j pnp|mac

ivmtc|nwi [njli{p ;* Mj oc `ijpioc @AL lnkn|caip s}m pm wmj mj oc nackmj pnk}nmj|m ~ mp|ãj

mj }j tm`}clti tihi* @}cjli wc~caip c lct mo `iacjli pmtwmt lmdmaip lm `ioi`ct oc

lntm``nðj nv lm oc s}m pm bc`m vcpct vit lntm``nðj vødon`c mj mp|m `cpi 36*3*3*0 s}m mp oc

lntm``nðj nv s}m |nmjm mj Vgpmjpm* Pn jip tmp}mowm `ittm`|camj|m mp vits}m oc tmkoc pm mp|ã

cvon`cjli dnmj* Pn vilmaip wmt mj oc nackmj `}cjli tmpiowmaip }j jiadtm îo jip wc c

aip|tct oc lntm``nðj nv ~ mo jiadtm lmo pmtwnlit lmo pmtwnlit LJP*

Wcaip c tmconxct oi anpai vctc `tmct oc tmkoc lm jc|mi mj VTMTI]\NJK vctc mo pmtwnlit PA\V

s}m pmtác mo pmtwnlit lm `ittmi s}m mp|ã mj oc LAX* Jip lntnknaip c oc vmp|cóc Vit| Git{ctl ~

lcaip `on` mj mo tm`}clti `ij mo pnkji% s}m cvctm`m co gnjco*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 13/39

 

 

34

Oip vctãam|tip c oomjct vctc oc tmkoc lm jc|mi vctc mo pmtwnlit PA\V pm a}mp|tcj mj oc

pnk}nmj|m nackmj* O}mki lm oomjct oip vctãam|tip k}ctlcaip oip `cadnip*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 14/39

 

 

30

Lcaip `on` mj Cvvo~ `bcjkmp vctc cvon`ct oi `cadnip mj oc tmkocp lm jc|mi*

Lmplm mo ms}nvi s}m pm mj`}mj|tc mj oc [CJ mj|tcaip c oc `ijpioc @AL ~ wcaip c tmconxct }j

|mojm| vctc wmtngn`ct s}m pn bcooc }j pmtwnlit lm `ittmi ~ pn pm mp|î tmlntm``nijcjli co pmtwnlit

lm `ittmi* ]|nonxcaip mo `iacjli `iai oi a}mp|tc oc nackmj* Vctãam|tip8

\mojm|8 `iacjli c mhm`}|ct

36*3*3*08 lntm``nðj nv lmo pmtwnlit PA\V " Mp|c mp oc lntm``nðj vødon`c s}m `}cjli mj vgpmjpm

tm`ndc oc vm|n`nðj PA\V oc tmlntm``nijm c oc nv 3>4*372*366*36.*

4=8 v}mt|i lmo pmtwnlit PA\V*

Pn |ili mp|ã dnmj jip lmdm cvctm`mt coki cpá `iai mj oc nackmj* \cadnîj mhm`}|m mo `iacjli

s}m mj }j tm`}clti tihi vctc cpmk}tctam s}m mo pmtwnlit lm `ittmi mp|m g}j`nijcjli*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 15/39

 

 

3<

C `ij|nj}c`nðj wcaip c vti`mlmt c tmconxct oi anpai s}m bmaip wmjnli bc`nmjli vmti mp|c

wmx pmtã vctc mo pmtwnlit VIV0* Jip lntnknaip c oc vmp|cóc Vit| git{ctl~ lcaip `on` mj mo

`}cltn|i `ij mo pnkji %* 

Oomjcaip oip `cavip lm nk}co acjmtc s}m pm a}mp|tc mj oc nackmj pnk}nmj|m vctc kmjmtct oc

tmkoc lm jc|mi vctc mo pmtwnlit VIV0 ~ k}ctlcaip*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 16/39

 

 

3=

Cvon`caip oip `cadnip mj ocp tmkocp lm jc|mi*

Lm j}mwi jip lntnknaip c oc aãs}njc s}m mp|ã mj oc [CJ ~ cdtnaip oc `ijpioc @AL ~

mhm`}|caip mo `iacjli |mojm| 36*3*3*0 336* Ln`bi `iacjli oi mrvons}m cj|mtnitamj|m*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 17/39

 

 

37

Pn |ili mp|ã dnmj jip lmdm cvctm`mt oi anpai s}m pm wm mj oc nackmj pnk}nmj|m*

@tmct tmkocp mj mo gntm{coo

@iai oi lnhm cj|mtnit mj oc nj|til}``nðj }j gntm{coo mp momamj|i lmj|ti lm }jc tml lnpmóclc

vctc dois}mct c``mpip ji c}|itnxclip* ]ji lm oip `it|cg}mkip acp }|nonxclip mj mo gntm{coo lm

gno|tcli lm vcs}m|mp*

]j gntm{coo |nmjm `iai g}j`nðj lmjmkct i vmtan|nt c``mpip*

Mj mp|c i`cpnðj wcaip c navomamj|ct }j gntm{coo mj vgpmjpm* Mj pn|ni {md s}m |tcm vgpmjpm

vctc clanjnp|tct wcaip c oc vmp|cóc Gntm{coo ~ pmom``nijcaip oc iv`nðj T}omp vctc mavmxct c`tmct tmkocp lm gno|tclit lm vcs}m|mp*

Pmom``nijcaip oc vmp|cóc [CJ vctc mavmxct c `tmct tmkocp lmo |tcgn`i lm wnmjm lmplm

nj|mtjm|* @}cjli pmom``nijcaip mp|c vmp|cóc jip wcj c cvctm`mt }jcp tmkocp s}m g}mtij

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 18/39

 

 

3;

`tmclcp c}|iaã|n`camj|m `}cjli mp|ãdcaip `tmcli ocp tmkocp lm jc|mi mj VTMTI]\NJK* Oc

vtnamtc tmkoc mj mp|m `cpi mp oc vit lmgm`|i ~ mp|c mj vmtan|nt |ili vmti acp clmocj|m oc

wcaip c `ioi`ct mj lmjmkct vit lmgm`|i ~ jclc acp pm wc c`mv|ct mo |tcgn`i lm ocp tmkocp s}m

mp|îj vmtan|nlcp mrvoá`n|camj|m*

Pn `ioi`caip oc tmkoc vit lmgm`|i mj lmjmkct oc lmdmaip lm `ioi`ct vtnamti vctc s}m ocp i|tcp

tmkocp lm gno|tcli lm vcs}m|mp mp|ãj mj c`mv|ct pm `}avocj*

Mp|i jip cbitti |tcdchi ~c s}m vgpmjpm oc tm`iji`m `iai pn ocp tmkocp s}m jc|mi mj

VTMTI]\NJK s}m wnmjm lmplm oc [CJ bc`nc oc LAX pij oip øjn`ip c``mpip s}m wc c vmtan|nt mo

gntm{coo lmplm oc [C*

Cbitc oi s}m bctmaip mj `tmct }jc tmkoc vctc aip|tct `iai pm `tmcj* Oc tmkoc c `tmct wc bc`mt

vctc c``mlmt lmplm oc [CJ c |tcwîp lmo vti|i`ioi B\\V mo c``mpi co pn|ni {md lm

clanjnp|tc`nðj lmo vgpmjpm* Vctc `tmct oc tmkoc pioi dcp|c `ij lct `on` mj mo `}cltn|i s}m

`ij|nmjm }j pnkji % mj oc vct|m njgmtnit lmtm`bc co gnjco*

Oip vctãam|tip c `ijgnk}tct vctc vmtan|nt mo c``mpi co pn|ni {md lm clanjnp|tc`nðj lmo vgpmjpmc |tcwîp lmo vti|i`ioi B\\V pm a}mp|tcj mj oc pnk}nmj|m nackmj*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 19/39

 

 

32

O}mki lm tmconxct mo vcpi cj|mtnit ~ bcdmt k}ctlcli jip wc c vctm`mt }jc nackmj `ij oc

pnk}nmj|m lijlm wcaip c lct `on` mj Cvvo~ `bcjkmp vctc s}m oip `cadnip pmcj cvon`clip* Co

cvon`ct oip `cadnip jip wc c cvctm`mt oc tmkoc `tmclc co gnjco*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 20/39

 

 

3>

C `ij|nj}c`nij vti`mlmtmaip c dittct oc tmkoc vit lmgm`|i s}m mp|c mj vmtan|nt |ili mo |tcgn`i*

Vctc mooi `b}omcaip oc tmkoc vit lmgm`|i ~ co gtmj|m cvctm`m }j `}cltn|i `ij oc om|tc R/ dcp|c

`ij pioi lct `on` coon onp|i*  

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 21/39

 

 

46

O}mki lm bc`mt mo vcpi cj|mtnit lcaip `on` mj Cvvo~ `cbjkmp vctc cvon`ct oip `cadnip lm ocp

tmkocp*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 22/39

 

 

43

Vti`mlmaip c `tmct oc tmkoc vit lmgm`|i mj lmjmkct |ili/ ln`bc tmkoc bc~ s}m `tmctoc co gnjco*

Vctc `tmct oc tmkoc ~ s}m s}mlm co gnjco lcaip `on` mj mo `}cltn|i `ij mo pnkji % s}m cvctm`m co

gnjco lm oc nackmj mj oc vct|m njgmtnit lmtm`bc*

Oip vctcam|tip vctc `ijgnk}tct oc tmkoc vit lmgm`|i mj lmjmkct |ili pm a}mp|tc mj oc

pnk}nmj|mp lip naãkmjmp ~ co gnjc lcaip `on` mj Pcwm*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 23/39

 

 

44

Vctc cvon`ct oip `cadnip mj ocp tmkocp lcaip `on` mj Cvvo~ `bcjkmp*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 24/39

 

 

40

Vti`mlmaip c tmonxct }jc vt}mdc/ mj mp|m `cpi wcaip c tmconxct oc vt}dm `ij }j vnjk* Jip

lntnknaip c oc acs}njc tmco s}m bc`m vct|m lm oc tml [CJ/ cdtnaip oc `ijpioc @AL ~ onp|caip

oc `ijgnk}tc`nij nv lm oc acs}njc*

^c pcdnmjli oc nv lm oc acs}njc wcaip c lctom vnjk c oc lntm``nij nv v}don`c s}m |nmjm mj

vgpmjpm*

Ji|c8 Tm`}mtlmj s}m oc oocacaiip nv v}don`c c ln`bc nv vit s}m c|tcwmp lm mpc mp s}m pconaip

c nj|mtjm| ~ ln`bc nv pcom c nj|mtjm| ktc`ncp co NPV*

Mj oc pnk}nmj|m nackmj mo vnjk mp gtc`cxcli ~c s}m ji bc~ }jc tmkoc mj mo gntm{coo s}m vmtan|c

s}m om bckcj vnjk co vgpmjpm*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 25/39

 

 

4<

Cbitc oi s}m wcaip bc`mt mp c vmtan|nt mo vnjk lmplm oc [CJ bc`nc mj vgpmjpm* Vctc mooi jip

lntnknaip c pn|ni {md clanjnp|tc|nwi lmo vgpmjpm ~ jip lntnknaip c oc vmp|cóc Gntm{coo ~

pmom``nijcaip T}omp* 

Cbitc lcaip `on` mj mo `}cltn|i s}m |nmjm mo pnkji % co vtnj`nvni s}m mp|c }dn`cli mj oc vct|m

p}vmtnit lmtm`bc ~ mp|c mj`mttcli mj }j `}clti tihi vctc cóclnt oc tmkoc s}m vmtan|c mo vnjk*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 26/39

 

 

4=

Vctc vmtan|nt mo vnjk lmplm oc tml [CJ oomjcaip oip vctma|tip `iai oi a}mp|tc ocp lip

nackmjmp pnk}nmj|mp ~ lcaip `on` mj Pcwm*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 27/39

 

 

47

Pmom``nijcaip Cvvo~ `bcjkmp vctc cvon`ct oip `cadnip m`bip mj ocp tmkocp*

Jip lntnknaip lm j}mwi c oc acs}njc tmco vctc wiowmt c tmconxct oc vt}mdc lmo vnjk* Pn vilmaip

wmt mj oc nackmj pnk}nmj|m mo vnjk mp pc|npgc`|itni mpi s}nmtm lm`nt s}m oc tmkoc lm pn mp|c

cvon`cjli*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 28/39

 

 

4;

Cbitc wcaip c vti`mlmt c `tmct tmkocp mj oc LAX/ jip lntnknaip c oc vmp|cóc LAX* Oi vtnamti

s}m wcaip c tmconxct mp mln|ct s}m tmkoc s}m wnmjm vit lmgm`|i mj vmtan|nt |ili ~ oc wcaip c

`ioi`ct mj lmjckct |ili*

Mj oc vct|m lmtm`bc lm oc nackmj cvctm`m }j `}cltn|i `ij oc om|tc m ~ mp|c mj }j tm`}clti tihi/

lcaip `on` coon vctc mln|ct oc tmkoc*

Oip vctcam|tip vctc `ioi`ct oc tmkoc mj lmjmkct |ili cvctm`m mj ocp lip pnk}nmj|mp naãkmjmp ~

co gnjc lcaip `on` mj Pcwm vctc k}ctlct oip `cadnip*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 29/39

 

 

42

Vctc cvon`ct oip `cadnip lcaip `on` mj Cvvo~ `bcjkmp ~ vilmaip idpmtwct s}m oc tmkoc c

`cadncli ̀ ittm`|camj|m*

Cbitc wcaip c vti`mlmt c `tmct }jc tmkoc s}m pm om wc c vmtan|nt c oc tml LAX pcont c |ili

bc`nc oc tml [CJ* Jip lntnknaip c mo `}cltn|i `ij mo pnkji % s}m cvtm`m co vtnj`nvni mj oc vct|mlmtm`bc lm oc nackmj*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 30/39

 

 

4>

Vctc vmtan|nt s}m pcoki |ili mo |tcgn`i lm oc LAX bc`nc nj|mtjm| oip vctcam|tip c `ijgnk}tct mj

oc tmkoc lm a}mp|tcj c `ij|nj}c`nij mj ocp lip pnk}nmj|mp naãkmjmp*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 31/39

 

 

06

Lcaip `on` mj Cvvo~ `bcjkmp ~ wmtmaip c tmkoc `tmclc mj mo vcpi cj|mnit*

C `ij|nj}c`nij `tmctmaip }jc tmkoc vctc vmtan|nt mo vnjk lmplm oc LAX bc`nc oc anpac LAX

mp|i am wc c vmtan|nt vtidct `ijm`|nlcl lmj|ti lm oc anpac tml ~ mp acp am wc vmtan|nt lctom

vnjk c oc v}mt|c lm mjoc`m lm oc LAX* Jip lntnknaip co tm`}clti s}m `ij|nmjm }j pnkji % vctc

cóclnt oc j}mwc tmkoc*

Vctc cóclnt oc tmkoc lm vnjk mj oc anpac LAX oip vctcam|ti c `ijgnk}tct mj oc tmkoc pm v}mlmj

idpmtwct mj ocp lip pnk}nmj|mp naãkmjmp*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 32/39

 

 

03

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 33/39

 

 

04

Lcaip `on` mj Cvvo~ `bcjkmp ~ viltmaip wmt oc tmkoc `tmclc mj mo vcpi cj|mtnit*

Bctmaip vt}mdcp lcjliom vnjk c oc v}mt|c lm mjoc`m lm oc LAX ~ lcaiom vnjk c oc v}mt|c lm

mjoc`m lmo gntm{coo s}m mj mp|m `cpi mp oc nv s}m |nmjm c``mpi c nj|mtjm|* Mj oc pnk}nmj|m nackmj

pm idpmtwc s}m oip vnjk pij pc|npgc`|itnip* Lmplm oc LAx om v}mlmj lct vnjk c `}cos}nmt ms}nvi

lm oc [CJ vit s}m pm om mp|c vmtan|nmjli |ili mo |tcgn`i bc`nc oc [CJ*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 34/39

 

 

00

Mj oc nackmj s}m pnk}m pm a}mp|tc s}m lmplm op tml LAX ji pm om v}mlc lct vnjk c jnjk}j

bip|p lm oc tml OCJ ~c s}m cj|mtnitamj|m ji pm mpvm`ngn`i s}m oc LAX om vilnc lct vnjk c

`}cos}nmt bip|p lm oc OCJ*

Oc tmkoc vit lmgm`|i mj oc tml OCJ mp vmtan|nt |ili |tcgn`i bc`nc ocp i|tcp tmlmp s}m pij o tml

LAX ~ oc [CJ* Ji pm a}mp|tc mj }jc nackmj vit s}m vit lmgm`|i wnmjm cpn*

Mj oc nackmj pnk}nmj|m pm a}mp|tc mo pn|ni {md lm oc tml OCJ*

Cbitc oi s}m wcaip c bc`mt mp tmconxct oc vt}mdc lmplm oc LAX ~ wmtngn`ct s}m lmplm oc LAX ji

pm v}mlm c``mlmt co pn|ni {md lm oc OCJ ~c s}m ji bc~ }jc tmkoc s}m oi vmtan|mtc lmplm oc

LAX* @ia ipm idpmtwc mj oc nackmj ji pm v}mdm mp|cdom`mt }jc `ijmrnðj `ij mo pmtwnlit {md

lm oc tml OCJ*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 35/39

 

 

0<

Jip lntnknaip c oc acs}njc s}m mp|c mj oc tml OCJ ~ tmconxct oc vt}mdc s}m lmplm `}cs}nmt

ms}nvi lm oc tml Ocj pn v}mlm c``mlmt c oc pn|ni {md lm oc tml LAX* Pm v}mlm idpmtwct mj oc

nackmj pnk}nmj|m s}m pn pm v}li c``mlmt co pn|ni {md lm oc LAX*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 36/39

 

 

0=

Lmplm oc anpac acs}njc lm oc OCJ wcaip c vtidct oip pmtwn`nip PA\V/ VIV0 ~ LJP ~ oc

`ijm`|nwnlcl c |tcwmp lmo vnjk*

]|nonxcaip mo `iacjli |mojm| ~ oc lntm``nij nv lmo pmtwnlit s}m `ij|nmjm oip pmtwn`nip ln`bipcj|mtnit ~ co gnjco lmo `iacjli `ioi`caip mo v}mt|i vit lijlm mp`}`bc mo pmtwn`ni*

Mp|c mj oc vt}mdc `ij mo pmtwnlit PA\V i `ittmi ~mp pc|npgc`|itnc*

Mp|c mp oc vt}mdc `ij mo pmtwnlit VIV0 ~ mp pc|npgc`|itnc*

Vctc bc`mt oc vt}mdc lmo LJP }|nonxcaip oip `iacjli aip|tclip mj mo tm`}clti tihi lm oc

nackmj pnk}nmj|m* Vit `clc `iacjli pm lc mj|mt ~ co gnjco pm tmp}owm }j jiadtm s}m mp|m mj

pmtwnlit LJP*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 37/39

 

 

07

Cbitc vtidctmaip s}m lmplm oc tml OCJ pm v}mlm vtidct `ijm`|nwclcp `ij ocp tmlmp [CJ/LAX ~ oc anpac OCJ*

Lmplm oc `ijpioc onp|caip oc `ijgnk}tc`nij nv lm oc acs}njc vctc wmtngn`ct s}m pn mp }j ms}nvi

lm oc OCJ*

Cbitc vtidcaip vnjk `ij `clc }jc lm ocp lntm``nijmp nv s}m mp|cj mj ̀ clc }jc lm ocp tmlmp*

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 38/39

 

 

0;

5/6/2018 Manual Firewall Pfsense - slidepdf.com

http://slidepdf.com/reader/full/manual-firewall-pfsense-559aba1941212 39/39

 

 

02

@IJ@O]PNIJMP

  Ocp tmkocp lm jc|mi am wcj c vmtan|nt tmlntm``nijct mo |tãgn`i mj|tcj|m ~

mjacp`ctcanmj|i lm nv* Mrnp|mj lip |nvip lm tmkocp vctc jc|mi s}m pij 8 VTMTI]\NJKs}m pij ocp s}m am vmtan|nt mo tmlntm``nijcanmj|i lmo |tcgn`i mj|tcj|m ~ ocp tmkocp lm

jc|mi mj VIP\TI]\NJK s}m pij ocp s}m am vmtan|mj mjacp`ctct an tml OCJ `ij oc

lntm``nðj nv v}don`c ~ cpá oc tml ocj v}mlc pcont c nj|mtjm|*  

  ]j gntm{coo am wc vmtan|nt `ij|tioct |ili mo |tãgn`i s}m pm wc c |tcpan|nt lm }jc tml c

i|tc tml `ij tmkocp lm vmtan|nt i lmjmkct* Ocp g}j`nijmp lm }j gntm{coo pij ocp lm

vmtan|nt i lmjmkct mo |tãgn`i* 

  Co navomamj|ct }j momamj|i pm tml `iai oip mp mo gntm{coo pm wc c dtnjlct aãp

pmk}tnlcl vctc oc tml* ^c s}m v}mlm `ij|tioct mo |tãgn`i lij mo gntm{coo ~ cpá pmtãj

amjip ocp vipndnonlclmp lm c|cs}mp c bc`nc an tml*