Firewalling RDP from external source to my LAN
-
Hello,
I have my ISP provider router at 192.168.1.1, and my PFSense in a virtual machine with 192.168.1.2 (this is WAN).
The LAN side is 192.168.101.1 for PFSense, and I want to be able to RDP to multiple machines from outside the network through EXTERNAL-IP:PORT
The question is, do I have to redirect all the ports I use from my ISP's router to PFSense's WAN IP (192.168.1.2), but then I guess I have to create some rules inside PFSense firewall in order for it to forward the conexion to the proper machine. For example:Imagine I want to set up RDP connection to a Machine called Machine1 with LAN IP: 192.168.101.10 through EXTERNAL-IP:3388 :
First step would be to change it's RDP port in regedit to 3388 for example. Then through ISP Router's I'll match port 3388 to PFSense's WAN IP 192.168.1.2.
My problem comes when i have to setup PFSense to redirect that connection from EXTERNAL-IP:3388 that comes through WAN to LAN's IP 192.168.101.10.Thanks in advance.
-
Really bad idea.. If you want to rdp to multiple machines on your network - just VPN into your network and then access.
Can you just put pfsense wan IP into the "dmz" mode of your isp router? If so then sure you could forward port X to port Y inside pfsense for your different rdp machines. But again opening up rdp to the public internet is BAD idea.
Do you know the IP you will be coming from so you could atleast limit the connections to rdp to that source IP, ie work or something?
-
Got any step-by-step guide about VPN and how I could get that working? I'm new to PFSense so not sure about to handle that. But I need to be able to acces to my LAN machines from external sources in the most secure way.
-
https://doc.pfsense.org/index.php/OpenVPN_Remote_Access_Server
Setting up openvpn on pfsense, just use the wizard and follow the bouncing ball to be honest.
