How do i allow http/https and block others in firewall

syedadi

Could anyone help me with this settings in firewall so that all client only can access internet via port 80/443 not others

Cry Havok

Create 3 rules on the LAN interface.

One to allow access to port 80, one to allow access to port 443 and then the last to block all traffic not destined to the pfSense LAN IP.

syedadi

how would be the 3ed rules? can you give me the details? i'm not very good at creating firewall rules :)

Cry Havok

Create the rules on the LAN interface with all settings as default except where I specify below:

First
Destination port: 80
Description: Allow port 80

Second
Destination port: 443
Description: Allow port 443

Third
Action: Block
Destination: not
Destination type: LAN address
Description: Block all not to pfSense host

Create them in that order. The first 2 allow connections only to web sites on 80 and 443 (which will deny access to many web sites that run on non-standard ports) and the last blocks any other connections that aren't to the pfSense LAN IP.

tommyboy180

Egress filtering is a smart thing to do. I wish more people did this so SPAM and virus infections wouldn't be so successful.

syedadi

Thanks :) Complete info….

what is "Egress filtering is a smart thing to do." Egress??

Cry Havok

Egress is another word for exit, used when talking about filtering the traffic leaving a network (as opposed to entering a network).

syedadi

ok2.. :) understand :) to jargon to me…