Prevent Snort from block my ip when I'm remote accessing my Pfsense box

ast

Hi!

Can I ask for help on how I can prevent Snort from block my IP address when I am accessing my Pfsense box remotely? I don't have static IP when I'm mobile, so I won't be able to whitelist my IP, any work around for this? Snort alert: (http_inspect) TOO MANY PIPELINED REQUESTS

TIA!

ast

mind12

Hi,

I dont't recommend to make your firewall management publicly accessable through Internet. It's a high security risk. Set up OpenVPN for management access instead.

ast

@mind12:

Hi,

I dont't recommend to make your firewall management publicly accessable through Internet. It's a high security risk. Set up OpenVPN for management access instead.

Thanks for the advice! I've been wanting to set up VPN, but don't know how to go about it or where to start :( totally clueless. Can you help point me to the right direction?

TIA!

ast

mind12

There are many step-by-step instructions over the Internet, pick one you prefer.

Official doc: https://doc.pfsense.org/index.php/OpenVPN_Remote_Access_Server
Other example: https://www.sparklabs.com/support/kb/article/setting-up-an-openvpn-server-with-pfsense-and-viscosity/

pfBasic

Bottom line is, don't enable remote access to your pfSense box without a VPN. Until you have a VPN server setup, disable all remote access.

SSH with pass + key auth is fine.