Chapter 4 – Using pfSense as a Firewall

  1. The principle of least privilege.
  2. Block will drop traffic silently, while Reject will send back a packet (RST for TCP or ICMP Port Unreachable for UDP).
  3. We will be able to connect to Recode; the block rule will have no effect because it was placed after the "Allow LAN to any" rule.
  1. We will not be able to connect to Recode; the block rule will match the traffic to Recode before the “Allow LAN to any” rule.
  2. (a) We will not be able to connect to Recode; the new “default allow” rule will be invoked after the block rule. (b) We will be able to connect to Recode; the new "default allow" rule will be invoked before the block rule. (c) The default "Allow LAN to any" rules have no effect on traffic flow anymore because they are never reached; the floating "default allow" rule is invoked first.
  3. IP, Network, Port, URL.
  4. (a) Navigate to Firewall | Aliases, click on the IP tab, click on Add, and enter each IP address manually; (b) navigate to Diagnostics | DNS Lookup, perform a DNS lookup, and create an alias from it; (c) navigate to Firewall | Aliases, click on the Import button, do a bulk import.
  5. IP Alias.
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset