How to check pfsense is in my ISP's router's DMZ?
-
Hi all,
I'm completely new to pfsense, and I have a FTTP broadband connection provided by Truespeed. One issue with their router is that it is completely locked down, I don't even have access to a simple status screen. Any changes to the router must be emailed to Truespeed customer service, who then applies the change on my router. This includes the Wi-Fi password, if I want to change it from the default. Yes, I have to email them the password, then they apply it to the router. Dreadful.
Anyway. It's the same with the DMZ settings, they say they already set up a DMZ of 192.168.0.10 and my pfsense box's WAN address is 192.168.0.10. I tried to set up port forwarding and followed the troubleshooting guide, and it didn't work. So I would like to double-check the DMZ is actually turned on and working, so what is a reliable way to tell that the pfsense WAN port is fully exposed to the Internet, please?
Many thanks for advice in advance!
-
If everything is forwarded to the pfSense WAN just check the firewall log. It will probably be full of blocks on WAN already. If not run an external test like Shields Up and then check again. You should see all the connection attempts blocked by the default rule. Except whatever you have added port forwards for.
Steve
-
@stephenw10 Of course, that's an excellent way, thank you. It doesn't look like DMZ is set up properly, there are some warnings in the firewall log, but they look odd and very consistent. Running ShieldsUP doesn't generate any output, and ShieldsUP result is also odd. Thank you for your suggestion, have contacted my ISP again.