Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DMZ web server

    Scheduled Pinned Locked Moved General pfSense Questions
    13 Posts 4 Posters 991 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      Dhruvin_Parmar @Bob.Dig
      last edited by

      @Bob-Dig
      Thank you so much for help.
      In this video it creates separate interface for DMZ.
      In my case as shown in figure I already configured second interface as Pc2.
      so I have to implement DMZ in PC2(interface).

      Is this possible ?

      Bob.DigB 1 Reply Last reply Reply Quote 0
      • Bob.DigB
        Bob.Dig LAYER 8 @Dhruvin_Parmar
        last edited by

        @danny_lucenzo Sure, your are doing it right so far.

        D 1 Reply Last reply Reply Quote 1
        • D
          Dhruvin_Parmar @Bob.Dig
          last edited by

          @Bob-Dig
          Ok.
          and how to create server like example.com in in pfsense ?

          Bob.DigB 1 Reply Last reply Reply Quote 0
          • Bob.DigB
            Bob.Dig LAYER 8 @Dhruvin_Parmar
            last edited by

            @danny_lucenzo You mean a webserver? I think this is a little bit offtopic. At least i can't help you with that.

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Mmm, unclear what you're asking here. If you have a webserver running on the host in the DMZ then you probably want to forward ports 80 and 443 to it. You may already have that though depending on how you setup the DMZ interface.
              https://docs.netgate.com/pfsense/en/latest/nat/port-forwards.html#adding-port-forwards

              Steve

              1 Reply Last reply Reply Quote 1
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by johnpoz

                Yeah a bit confused to what your asking as well? If you already have your webserver on its own network, that your calling your dmz.

                What is the question/concern?

                Are you asking what a dmz is? Are you asking how to access this servers services from internet?

                Are you asking how you can get example.com to point to your public IP, and forward that to your webserver?

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                D 1 Reply Last reply Reply Quote 1
                • D
                  Dhruvin_Parmar @johnpoz
                  last edited by

                  @johnpoz I had not created any webserver. My question is how to create webserver running on host in DMZ.

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by johnpoz

                    Well that has nothing to do with pfsense ;) I would suggest you get with support for your host OS and or the support for whatever httpd you want to run. Apache, Nginx?

                    But in a nutshell..

                    1. install whatever httpd you want to use.

                    2. forward port(s) it will be using common are 80 (http) and 443 (https) on pfsense to that servers IP. https://docs.netgate.com/pfsense/en/latest/nat/port-forwards.html

                    3. configure public dns to point to your pfsense wan public IP.. Can be done via static records or ddns.

                    4. ???

                    5. Profit

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      You forgot the ???? step. ๐Ÿ˜œ

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        hehehe - is that better?

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        stephenw10S 1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator @johnpoz
                          last edited by

                          Yup. ๐Ÿ˜

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.