Firewall Advice

[eddiemcdiarmid]

Hi Guys, after a bit of security advice for my network. Very simplified network diagram attached. We have recently installed a radio link to from a nearby property who has fibre, however I want to prevent them being able to see my network. Essentially I need to add a firewall rule to prevent the ‘External Network’ being able to access my network. Hope I have provided enough information, any questions please let me know. Thanks in advance! Eddielogin-to-view

[johnpoz]

Be default there is deny, if you did not add any rules onto this wan 1 interface than all unsolicited traffic into that interface would be blocked by default.

[eddiemcdiarmid]

Hmm interesting. I don’t have any rules but the managed of the network I’ve named ‘external network’ can see my router . Is there a rule I can add to block them being able to access my network?

[akuma1x]

@eddiemcdiarmid said in Firewall Advice:

Hmm interesting. I don’t have any rules but the managed of the network I’ve named ‘external network’ can see my router. Is there a rule I can add to block them being able to access my network?

Seeing your network and accessing your network are two very different things. You say both in your reply post above. The default block/deny rules on every pfsense install for the WAN interface, like @johnpoz talks about above, keeps people/hosts from accessing your network.

You don't need to do it, but if you're really paranoid about that external network, you could set a specific block rule in your WAN interface to block/deny it's IP addresses. Again, you really don't need to do it, however.

This is an example of the default settings and wording from an old version of pfsense, but I think the current versions still look like this on the WAN interface:

Jeff