Changes between Version 7 and Version 8 of pfsenseconfig

Timestamp:

Nov 24, 2016, 12:14:08 PM (7 years ago)

Author:

admin

Comment:

--

pfsenseconfig

@@ -44 +44 @@
 
 === Firewall Rules ===
- -Go to menu and click '''System'''
+ - Go to menu and click '''Firewall'''
  - In the drop down list select '''Rules''' and you will directed to the firewall rules configuration page 
  - You will see three tabs
@@ -119 +119 @@
 
 === Using Alias ===
-   
+Aliases can be used to simplify your configurations. Imagine you have set of devices that needs the same privileges. To set firewall rules you have add rules for each device. With aliases you can bundle them under a name. To create aliases:
+==== Create Aliases ====
+Let's bundle some hosts
+ - First go to '''menu''' and select '''Firewall''', From the drop down list select '''Aliases'''
+ - In the '''IP''' tab click on '''Add''' Button
+ - In the next page set the following
+   * Name : '''Famoussites'''
+   * Description : '''some most visited sites'''
+   * Type : '''Hosts'''
+   * IP or FQDN : google.com
+   * Click '''Add Host''' You will get another box too add more hosts
+   * Add yahoo.com and facebook.com and click '''Save''', In the next page click '''Apply Changes'''
+
+Now let's bundle some ports
+ - Go to '''menu''' and select '''Firewall''', From the drop down list select '''Aliases'''
+ - In the '''Ports''' tab click on '''Add''' Button
+ - In the next page set the following
+   * Name : '''Usable ports'''
+   * Description : '''some most popular ports'''
+   * Type : '''Ports'''
+   * Port : add port 22,53,25,80,443  then click '''Save''', In the next page click '''Apply Changes'''
+
+Now lets use these aliases
+ - Go to menu and click '''Firewall'''
+ - In the drop down list select '''Rules''' go to WAN tab
+ - Edit the rule you create in the NAT section by clicking the '''pencil''' icon
+ - Change destination port range from '''any''' to '''other'''
+ - In the Custom text box type ports (Alias name)
+ - Click '''Save''' and '''Apply Changes'''
+ - Try to Ping the VM from your PC
+ - Try to SSH to the VM from your PC
+
+ - Go to menu and click '''Firewall'''
+ - In the drop down list select '''Rules''' go to LAN tab and click '''Add'''
+ - Set the parameter as follows
+   * Action : '''Block'''
+   * Interface : '''LAN'''
+   * Address Family : '''IPv4'''
+   * Protocol : '''ICMP'''
+   * Source : '''Single Host or Alias'''
+   * Give your vm's IP address in the text box
+   * Destination : '''Single Host or Alias'''
+   * Give alias Famoussites
+   * Description : '''Block ICMP from user host'''
+ - Click '''Save''' and '''Apply changes''' on the next page
+ - Try ping to google.com, Yahoo.com, facebook.com from your VM
+ - Try ping www.ac.lk
+
 === Traffic Management ===