DMZ on existing router query

Emjay111 · Sep 7, 2011, 8:32 PM

Hi there,

I'm unable to change the rather cheap, nasty router provided by my ISP, so I don't have a Bridge mode or similar facility.

As pfSense is effectively a fully fledged router, is it safe / possible / advisable to put the pfSense WAN ip address in my existing routers DMZ.

My thinking behind this is that any rules in the router firmware customed by my ISP, won't apply. This should take any potential problems out of the equation.

Not sure if this is the right forum for this question, but it's general enough I feel.

Thanks,

Marcus

jimp · Sep 12, 2011, 1:12 PM

That should be fine. Aside from the additional layer of NAT going on, that should be roughly equivalent to having the public IP directly on pfSense, which is really what would be ideal.

Emjay111 · Sep 13, 2011, 8:48 PM

@jimp:

That should be fine. Aside from the additional layer of NAT going on, that should be roughly equivalent to having the public IP directly on pfSense, which is really what would be ideal.

Thanks for the reply. It's good to have a second opinion!