Basic firewall rules

bobbyclarke

What are the typical WAN firewall rules I need to set up for internet browsing and PS3, Wii, Apple TV? I have set up a rule that is TCP/UDP * * * * * but this seems dangerous.

Thanks!

cmb

Don't need any WAN rules for any of that. You should likely have no rules at all on WAN.

bobbyclarke

Thank you! I disabled the rule.

dododo

Hi all !
A bit offtopic but do you guys know by chance a place (website, book, online course…) where i can find information about most common firewall rules to use in a small home network.
The thing is that i try to teach myself a bit about firewall before joining a network school next year.
I successfully installed pfSense and it runs well in my setup (a few clients, a local server and some wireless ap) but i witness a lot a unknown traffic which might not be relevant for me.
So i would glad to be reading some networking/security classics to be a little more knowledgeable.
Thanks in advance!

cmb

@dododo:

A bit offtopic but do you guys know by chance a place (website, book, online course…) where i can find information about most common firewall rules to use in a small home network.
The thing is that i try to teach myself a bit about firewall before joining a network school next year.

That and a lot more covered in http://pfsense.org/book That would be a great starting point (though if you have very little networking familiarity you may want to add some introductory-level networking material, as we assume basic networking knowledge in the book, weren't reinventing the wheel on basic networking books).

dododo

Thanks cmb ! I have already read the book (at least the relevant parts for my setup). It really clear and helpful to configure a basic pfSense.
I am actually looking for resources about local network communications, firewall rulesets ((with examples) not necessarily about PF), security policies.
In a word a good site/book to learn about network security in general.

PS.
I hope we will be able to see the version 2.0 of the Definitive Guide soon. :)
It must be quite a work to put it all together.

cmb

There are several example rulesets in the book. The primary thing aside from defaults would be egress filtering though most home networks won't use it. Local communications don't touch the firewall so they're outside the scope of any network firewall.

dododo

Thanks for the tip. I must have missed this chapter !
What other good networking book do you recommend ?