• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

NAT through to Webdav FreeNAS

Scheduled Pinned Locked Moved Firewalling
5 Posts 2 Posters 973 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • G
    Gil Rebel Alliance
    last edited by Dec 10, 2017, 9:47 PM

    I have an IoT device that can only deliver secure files via Webdav.
    I intend on setting up a FreeNAS Box with Webdav shares and I am curious as to the most secure way to push through my pfSense Firewall to the FreeNAS.
    Is it advisable to push a NAT on a single port and enable Webdav directly through?

    11 cheers for binary

    1 Reply Last reply Reply Quote 0
    • D
      Derelict LAYER 8 Netgate
      last edited by Dec 11, 2017, 12:10 AM

      If you forward a port though pfSense to FreeNAS all security for that service will be FreeNAS's responsibility.

      You might be able to gain some protection by using snort in blocking mode to detect intrusion and block the offending address.

      You might be able to help secure it by using something like pfblockerng to block from certain countries/regions.

      If you MUST port forward the best thing to do is strictly limit the source addresses for the port forward/firewall rule to just your source site(s).

      In almost all cases putting that traffic through a VPN is better than port forwarding, if possible.

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      1 Reply Last reply Reply Quote 0
      • G
        Gil Rebel Alliance
        last edited by Dec 11, 2017, 12:32 AM

        Thank you for the suggestions.
        I would love to be able to tunnel it through a VPN that is hosted on the pfSense firewall;
        unfortunately the IoT device only has Webdav as a security option, and that is not an option on the pfsense host.

        Might be a silly question but; can I packet filter (on pfSense) to only allow Webdav through?

        11 cheers for binary

        1 Reply Last reply Reply Quote 0
        • D
          Derelict LAYER 8 Netgate
          last edited by Dec 11, 2017, 12:34 AM

          That's because "Webdav" is not a security option that has any place on a firewall.

          You would pass through the http/https ports to FreeNAS and it would be doing the webdav there.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • G
            Gil Rebel Alliance
            last edited by Dec 11, 2017, 12:51 AM

            Okay, many thanks

            11 cheers for binary

            1 Reply Last reply Reply Quote 0
            2 out of 5
            • First post
              2/5
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
              This community forum collects and processes your personal information.
              consent.not_received