pfsense packet process order

mgcsec

Hi,
where can i find proper packet process order explanation?
where do plugins come in?
I understand it's NAT=>FW=> and then plugins?
And if its an nginx (os plugin or package), where is it placed in that chain?
thanks

stephenw10

See: https://docs.netgate.com/pfsense/en/latest/nat/process-order.html

Steve

mgcsec

@stephenw10
thank you!
and then where are local services/plugins involved?
for example Nginx in that chain?
NAT=>FW=>Nginx=>NAT=>FW=>Upstream?

bmeeks

@mgcsec said in pfsense packet process order:

@stephenw10
thank you!
and then where are local services/plugins involved?
for example Nginx in that chain?
NAT=>FW=>Nginx=>NAT=>FW=>Upstream?

For some services, yes, this is the processing order. But for others such as the IDS/IPS packages, this is the processing order:

IDS/IPS => NAT => FW (for inbound traffic on WAN)
IDS/IPS => FW => NAT (for inbound traffic on LAN)