• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Firewall Advice

Firewalling
firewall security
3
4
946
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • E
    eddiemcdiarmid
    last edited by Jan 3, 2019, 3:50 PM

    Hi Guys, after a bit of security advice for my network. Very simplified network diagram attached. We have recently installed a radio link to from a nearby property who has fibre, however I want to prevent them being able to see my network. Essentially I need to add a firewall rule to prevent the ‘External Network’ being able to access my network. Hope I have provided enough information, any questions please let me know. Thanks in advance! Eddielogin-to-view

    1 Reply Last reply Reply Quote 0
    • J
      johnpoz LAYER 8 Global Moderator
      last edited by Jan 3, 2019, 3:58 PM

      Be default there is deny, if you did not add any rules onto this wan 1 interface than all unsolicited traffic into that interface would be blocked by default.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

      1 Reply Last reply Reply Quote 0
      • E
        eddiemcdiarmid
        last edited by Jan 3, 2019, 4:11 PM

        Hmm interesting. I don’t have any rules but the managed of the network I’ve named ‘external network’ can see my router 🤔. Is there a rule I can add to block them being able to access my network?

        A 1 Reply Last reply Jan 4, 2019, 8:13 PM Reply Quote 0
        • A
          akuma1x @eddiemcdiarmid
          last edited by akuma1x Jan 7, 2019, 8:44 PM Jan 4, 2019, 8:13 PM

          @eddiemcdiarmid said in Firewall Advice:

          Hmm interesting. I don’t have any rules but the managed of the network I’ve named ‘external network’ can see my router. Is there a rule I can add to block them being able to access my network?

          Seeing your network and accessing your network are two very different things. You say both in your reply post above. The default block/deny rules on every pfsense install for the WAN interface, like @johnpoz talks about above, keeps people/hosts from accessing your network.

          You don't need to do it, but if you're really paranoid about that external network, you could set a specific block rule in your WAN interface to block/deny it's IP addresses. Again, you really don't need to do it, however.

          This is an example of the default settings and wording from an old version of pfsense, but I think the current versions still look like this on the WAN interface:

          alt text

          Jeff

          1 Reply Last reply Reply Quote 0
          3 out of 4
          • First post
            3/4
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.