Learn pfSense 2.4: Get up and running with Pfsense and all the core concepts to build firewall and routing solutions by David Zientara

Author:David Zientara [Zientara, David]
Language: eng
Format: epub, pdf
Tags: COM043050 - COMPUTERS / Security / Networking, COM043000 - COMPUTERS / Networking / General, COM053000 - COMPUTERS / Security / General
Publisher: Packt Publishing
Published: 2018-07-30T23:00:00+00:00

Port-forwarding

Port-forwarding is typically used in scenarios where we have a single public IP address and several resources–in many cases on separate nodes–that must be made accessible to the internet. In such cases, it is useful to map traffic to different nodes based on the port on which the traffic entered the network–hence the term port-forwarding.

Port-forwarding is rarely seen in corporate networks (corporations are more likely to be able to afford separate IP addresses for different services), but are commonly seen in home and SOHO networks. Fortunately, pfSense is designed to work with a variety of networks and supports port-forwarding. However, we must take into account the following:

Port-forwarding in pfSense is always applied before 1:1 NAT.

Port-forwarding rules in pfSense are applied before firewall rules.

Port-forwarding is always a 1:1 proposition. Thus, we can only map a port number to a single node. If we want to have multiple FTP servers, for example, we cannot have them on the same port.

The creation of a port-forwarding entry does not in itself make the port accessible from the WAN side. pfSense blocks all traffic on all interfaces and all ports by default, and in order for traffic to pass, there must be a corresponding firewall rule. Fortunately, pfSense streamlines the process of creating a matching firewall rule.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.