PFSense: Connecting Network to the Internet

Поділитися
Вставка
  • Опубліковано 22 лют 2021
  • For those familiar with pfsense you know that LAN comes with some default firewall rules. When you add a third interface you don't get these default rules.
    This video shows you 3 important rules for allowing users on a network to connect to the internet!
    Hey! if you are enjoying my content feel free to buy me a coffee!
    www.buymeacoffee.com/redbluelabs
    Check out the Merchandise!
    redbluelabs.myspreadshop.ca/

КОМЕНТАРІ • 28

  • @darioantunes1239
    @darioantunes1239 29 днів тому

    Thanks it worked for me. Now my opt network is able to access the internet. Now I know only the lan interface by default allows internet. Not the case with the other interfaces. Manually have to adjust rules to allow internet access for the rest of interfaces in pfsense. Thanks 🎉

    • @RedBlueLabs
      @RedBlueLabs  27 днів тому

      I'm glad the video was helpful ! Thanks for watching:)

    • @ronaldregans
      @ronaldregans 22 дні тому

      ​Bro I did exactly as you said in the tutorial but I still struggle to get any connection ​@@RedBlueLabs

  • @corvonatsuki6660
    @corvonatsuki6660 4 місяці тому

    Thank you !!! It helped a lot.

  • @tristandippenaar3153
    @tristandippenaar3153 2 роки тому

    Bro thank you so much this video helped my noob-ass get my own homebrewn network setup

    • @RedBlueLabs
      @RedBlueLabs  2 роки тому +1

      that's awesome! I love hearing this. building your own network is the best way to practice security. PFSense is a great tool because you can get your hands on a lot of different modules. Additionally, if security is a field you are interested in. I know a ton of interviewers ask this question "can you tell me about your home lab?" It shows a desire to learn and to practice. Thanks for watching :)

  • @andreasmusic1222
    @andreasmusic1222 10 місяців тому +2

    OP1 is not any option anywhere in my pfsense interface. Any clue why?

    • @RedBlueLabs
      @RedBlueLabs  10 місяців тому +2

      Great question! In your VirtualBox you have to enable an additional adapter. Once enabled restart pfsense, from there you will have to configure the new interface. I have a video on that!!
      ua-cam.com/video/dFsjB03_9jQ/v-deo.html

  • @mahdewii6696
    @mahdewii6696 Рік тому +1

    brother I have a problem. I've put my LAN interface on host-only, my OPT1 is in internal network which is connected to pfsense with a dhcp server. When I try to access internet on my ubuntu machine (connected to internal network) It won't work and I have made the any rule for my OPT1 interface

    • @RedBlueLabs
      @RedBlueLabs  Рік тому +2

      Thx for watching, in your unbuntu machine trying pinging your gateway.
      You may have to manually set your gateway in you Ubuntu network settings. Additional test you could do is to set your DNS in Ubuntu to 8.8.8.8 which is Google's DNS.
      Let me know if it works we can't try some additional troubleshooting:)

  • @deyaelaaziz9937
    @deyaelaaziz9937 Рік тому

    Hey bro, what kind of config did you put on your vwmare interface ?
    Thank you in advance

    • @RedBlueLabs
      @RedBlueLabs  Рік тому

      hey good question. so for the LAN and OPT1 I have them set to an internal network. Because these internal networks are connected to the PFSense interface and the PFSense interface has a DHCP server running on it (just like your home router) IP addresses are going to be handed out to anyone who is connected to that network, in this case the windows machine. I hope that helps. Thanks for watching!!

  • @davidmuszynski4504
    @davidmuszynski4504 Рік тому +1

    This video does not show you how to stop that traffic from going to your .10 LAN. Is ANY really the best option for destination for internet traffic?

    • @RedBlueLabs
      @RedBlueLabs  10 місяців тому

      Sorry for not catching this alert, I'm glad you left a question! The FW rule would have to be specifically made to either allow or deny traffic to .10. if the LAN where the traffic is leaving has no rules at all then nothing can get out. It all depends on what you want your LAN users to do. Go to the internet only? Then add a rule for 80,443,53 with proto TCP/UDP and destination any
      Thanks for watching have an awesome day

  • @timb2752
    @timb2752 4 місяці тому

    Hey man, I have the following setup: pfsense with bridge adapter and internal adapter called "LAN". ubuntu linux machine with only one internal adapter connected to "LAN". When I launch the ubuntu machine and pf sense as well of course, the ubuntu machine fails to get an IP address from the pfsense dhcp (which I have enabled on pfsense btw). I havent messed with the firewall rules yet. What could be the problem? much thanks

    • @timb2752
      @timb2752 4 місяці тому

      i also tried statically assigning the IPv4 address, gateway, and DNS server. that didnt work either, unless i did it wrong

    • @RedBlueLabs
      @RedBlueLabs  4 місяці тому

      Thanks for leaving a comment! Double check these things.
      -Set your WAN to NAT in virtualbox
      -make sure pfsense is fully booted before starting your Ubuntu
      -double check that Ubuntu is set to automatic IP(DHCP)
      -make sure pfsense has a DHCP pool that is seperate from the rest of the static ups
      -make sure that the static ip you set is not one of the DHCP addresses
      -

    • @RedBlueLabs
      @RedBlueLabs  4 місяці тому

      If I think of anything else I will put it in here. Pfsense is very good for home lab environments:)

  • @ronaldregans
    @ronaldregans 22 дні тому

    Bro I did exactly what you said in the tutorial but still no connection

    • @RedBlueLabs
      @RedBlueLabs  20 днів тому

      Thanks for leaving a comment, it depends on your virtual lab set up a bit. NAT first then network second in your virtual box. Make sure that pfsense is in the same order.
      Quite often though the issue is actually on the host machine, that even when the firewall is correct the VM won't connect through. Double check your browser and network settings on the machine you are wanting to connect from. I hope this helps a bit :)

    • @ronaldregans
      @ronaldregans 20 днів тому

      My host machine is a Chinese build from AliExpress firewall router j1900 Celeron cpu so bro could you share with me your pfsense configuration and exactly your host machine specs so maybe I could try to copy you exactly so it could work out and please be as detailed as possible cuz I'mma noob 😅
      And please leave me your chat app number so we could talk a lot more cuz honestly I'm from Saudi Arabia and and our timezones are pretty different so please share with me your day schedule when you're free and when not

  • @MOHMEDOKFID
    @MOHMEDOKFID Рік тому

    that doesnt work for me , interface lan ne ping pas avec google

    • @RedBlueLabs
      @RedBlueLabs  Рік тому

      hey, with out knowing more about your setup. In order for Pings to get out you have to allow ICMP traffic to leave. If you are setting an allow-all rule to come from the LAN network to other networks, (outside included) then ICMP and TCP are taken care of with that. Generally I don't recommend setting allow all rules in any scenario. However it really depends on what you are building and how that LAN needs to operate

  • @Arracz.
    @Arracz. Рік тому

    that doesnt work for me

    • @RedBlueLabs
      @RedBlueLabs  Рік тому +1

      Sorry, late response. Where does it stop working for you?

    • @zk321
      @zk321 9 місяців тому

      wow he acc responds. @@RedBlueLabs