Hyper-V LAB setup with pFSense as internet gateway

Always-KB

Hi all,

I'm a noob in this area. I want to use the pfSense as a internet gateway for my test env.

LAB01, contains server and clients
LAB02, contains server and clients

Right now both LAB's can access the internet and ping each other. I want to isolate them so they only can access the Internet.

alt text

Firewall rules right now:
alt text

Any advice are welcome... or point me to a guide i can follow

Mats

Alright.
We can do this :)

On for example Forefront TMG you would have created a rule saying that anything going to external is allowed and drop the rest. PFSense however doesn't have an external object so instead we will need two rules per network instead instead

First we need a Block rule that stops the unwanted traffic. Second we need an allow any rule that allows anything we haven't already blocked.

In your case you need a block rule as rule nr2 on LAN:
Source Any
Destination 192.0.0.129/25

You will need a Block rule on OPT1 to (before the allow any-any rule)
Source Any
Destination 192.0.0.1/25