Hyper-V LAB setup with pFSense as internet gateway

[Always-KB]

Hi all,

I'm a noob in this area. I want to use the pfSense as a internet gateway for my test env.

• LAB01, contains server and clients
• LAB02, contains server and clients

Right now both LAB's can access the internet and ping each other. I want to isolate them so they only can access the Internet.

Firewall rules right now:

Any advice are welcome... or point me to a guide i can follow

[Mats]

Alright.
We can do this :)

On for example Forefront TMG you would have created a rule saying that anything going to external is allowed and drop the rest. PFSense however doesn't have an external object so instead we will need two rules per network instead instead

First we need a Block rule that stops the unwanted traffic. Second we need an allow any rule that allows anything we haven't already blocked.

In your case you need a block rule as rule nr2 on LAN:
Source Any
Destination 192.0.0.129/25

You will need a Block rule on OPT1 to (before the allow any-any rule)
Source Any
Destination 192.0.0.1/25