Blocking truenas access
-
Planning to set the rule that block webgui into truenas from everyone
Truenas port is 54222 and here what I did and IDK what I am missing
Action: Block
Interface: LAN
Address F: IPv4
Protocol: TCP/UDP
Source : Any
Destination: any port 54222Thanks in advance.
-
@kreki1986 Destination should be the IP of the TrueNAS and the rule should be on the interface that TrueNAS is connected to.
It won't block subnet traffic, though.
-
@kreki1986
If both, the Truenas and the devices you want to block are in the LAN subnet, the traffic won't pass pfSense. So there is no way to block it.
Put the Truenas into another network segment in this case, maybe a VLAN hooked up on the LAN network. -
@rcoleman-netgate
Thanks for the explanation -
@viragomann
Thank you Viragomann.
This explain everything.
Both devices are on the same network that the reason why.I want to leave this truenas connected on the internet to get the updates.
What would be the best practice of rule to block anyone beside this private network to have access on this truenas -
@kreki1986 if you want to use pfsense to control access to the nas from your other local networks you would need to put the truenas on a different network/vlan than the devices you want to control access from..