How to Secure my Web Server thorough pfSense

[kazim_riaz]

Hi All,

I am new to pfSense, so if I am stupid in my question kindly ignore it. My question is that I have a static WAN IP and want to use pfSense to secure my webserver, what will be good practice to do that, if you can share the step by step procedure it will be helpful for me.

THANK YOU

[Gertjan]

Hi,

See https://forum.netgate.com/topic/115658/how-to-protect-webservers-help-make-the-ultimate-setup?_=1606732024784 for some aspects.

Short answer : you NAT ports 80 and 443 on pfSense, and the rest is "web server setup".

[stephenw10]

Yup. If you know who you need to allow access to you could also use pfBlocker to generate Geo IP aliases, then allow access from only those you need. Or block block access from lists of known bad actors etc.
You might also consider running Snort/Suricata to check that traffic. That quite a complex setup though, I would not add that immediately.

Steve

[Davidmenk3]

This post is deleted!