Transparent firewalling WAN-DMZ-Bridge

[archimedes]

Hi there!

I want to set up a transparent firewall setup.
In the WAN is the provider uplink, in the dmz my servers, in the lan private stuff.

I gave the WAN a public IP, the DMZ is none and I set up a bridge.

-> Is it necessary or usful to setup a bridge interface and put there the public IP?

[KOM]

I have a similar setup and I don't use any bridge.  What are you trying to bridge?

[archimedes]

I want to give the servers in the DMZ public IPs without NATing.
And I have one /28 net from my upstream wihtout any routing.

• the WAN is in its own VLAN only with the uplink to the gateway
• the DMZ is in its own VLAN with the servers
• and the LAN has it own VLAN

All 3 are switched to dedicates interfaces on the pfsense box.

[KOM]

Different setup than I have, and I don't have any experience doing what you're trying to do.