Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DMZ web server

    Scheduled Pinned Locked Moved General pfSense Questions
    13 Posts 4 Posters 988 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      Dhruvin_Parmar
      last edited by

      hello everyone

      I am currently new and working on pfsense 2.4.5

      I want to create a DMZ web server on pfsense.please help me.

      DMZ.jpeg

      1 Reply Last reply Reply Quote 0
      • Bob.DigB
        Bob.Dig LAYER 8
        last edited by

        https://www.youtube.com/watch?v=QFk5jX-oeSo

        D 1 Reply Last reply Reply Quote 1
        • D
          Dhruvin_Parmar @Bob.Dig
          last edited by

          @Bob-Dig
          Thank you so much for help.
          In this video it creates separate interface for DMZ.
          In my case as shown in figure I already configured second interface as Pc2.
          so I have to implement DMZ in PC2(interface).

          Is this possible ?

          Bob.DigB 1 Reply Last reply Reply Quote 0
          • Bob.DigB
            Bob.Dig LAYER 8 @Dhruvin_Parmar
            last edited by

            @danny_lucenzo Sure, your are doing it right so far.

            D 1 Reply Last reply Reply Quote 1
            • D
              Dhruvin_Parmar @Bob.Dig
              last edited by

              @Bob-Dig
              Ok.
              and how to create server like example.com in in pfsense ?

              Bob.DigB 1 Reply Last reply Reply Quote 0
              • Bob.DigB
                Bob.Dig LAYER 8 @Dhruvin_Parmar
                last edited by

                @danny_lucenzo You mean a webserver? I think this is a little bit offtopic. At least i can't help you with that.

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  Mmm, unclear what you're asking here. If you have a webserver running on the host in the DMZ then you probably want to forward ports 80 and 443 to it. You may already have that though depending on how you setup the DMZ interface.
                  https://docs.netgate.com/pfsense/en/latest/nat/port-forwards.html#adding-port-forwards

                  Steve

                  1 Reply Last reply Reply Quote 1
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by johnpoz

                    Yeah a bit confused to what your asking as well? If you already have your webserver on its own network, that your calling your dmz.

                    What is the question/concern?

                    Are you asking what a dmz is? Are you asking how to access this servers services from internet?

                    Are you asking how you can get example.com to point to your public IP, and forward that to your webserver?

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    D 1 Reply Last reply Reply Quote 1
                    • D
                      Dhruvin_Parmar @johnpoz
                      last edited by

                      @johnpoz I had not created any webserver. My question is how to create webserver running on host in DMZ.

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by johnpoz

                        Well that has nothing to do with pfsense ;) I would suggest you get with support for your host OS and or the support for whatever httpd you want to run. Apache, Nginx?

                        But in a nutshell..

                        1. install whatever httpd you want to use.

                        2. forward port(s) it will be using common are 80 (http) and 443 (https) on pfsense to that servers IP. https://docs.netgate.com/pfsense/en/latest/nat/port-forwards.html

                        3. configure public dns to point to your pfsense wan public IP.. Can be done via static records or ddns.

                        4. ???

                        5. Profit

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          You forgot the ???? step. ๐Ÿ˜œ

                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator
                            last edited by

                            hehehe - is that better?

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            stephenw10S 1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator @johnpoz
                              last edited by

                              Yup. ๐Ÿ˜

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.