How to build a DMZ interface on pfsense with hosts with public IPs assigned
-
Hi, I searched this community and the web for my question but I'm not sure if I have found the right solution for what I want to achive.
Given is a pfsense with multiple WAN connections to it and multiple LANs.
To one of the WAN connections the provider has assigned 2 /29 subnets of public IP adresses. These are configured as virtual IPs within pfsense.
These are currently used for DMZ services with 1:1 NAT.
This is functioning without any issues.Now there need to be 2 services established where the servers need to be placed in the DMZ BUT CANNOT be configured with NAT. This means I need to configure the actual NICs on public IP.
Anyway I would of course like to restrict access to these servers via pfsense (ports/source IPs, etc)So my question is:
How can I create a DMZ within pfsense where I can use the public IPs (configured as virtual IPs) for the hosts.Looking forward for any help, thanks!
-
Have your ISP route a subnet to one of your WAN addresses.
You can then assign that subnet to the DMZ interface and firewall on WAN as desired.
