Hyper-V LAB setup with pFSense as internet gateway



  • Hi all,

    I'm a noob in this area. I want to use the pfSense as a internet gateway for my test env.

    • LAB01, contains server and clients
    • LAB02, contains server and clients

    Right now both LAB's can access the internet and ping each other. I want to isolate them so they only can access the Internet.

    alt text

    Firewall rules right now:
    alt text
    alt text

    Any advice are welcome... or point me to a guide i can follow



  • Alright.
    We can do this :)

    On for example Forefront TMG you would have created a rule saying that anything going to external is allowed and drop the rest. PFSense however doesn't have an external object so instead we will need two rules per network instead instead

    First we need a Block rule that stops the unwanted traffic. Second we need an allow any rule that allows anything we haven't already blocked.

    In your case you need a block rule as rule nr2 on LAN:
    Source Any
    Destination 192.0.0.129/25

    You will need a Block rule on OPT1 to (before the allow any-any rule)
    Source Any
    Destination 192.0.0.1/25


Log in to reply