PF(non)Sense - Please someone help me configure this firewall!

[ben604]

Following on from another post, I've installed PFSense to act as a firewall.

 

We're trying to block all but HTTP/HTTPs traffic on one segment of our network.

 

I've got the box installed, connected and configured, to a point...

 

I can see the internet within the PFSense Web interface - I've been pinging the interweb happily. Topology is as follows:

 

Internet - Gateway 10.60.28.3

|

Juniper Firewall

|

Switch

 

PFSense Box

Existing Lan

 

New Lan

 

My questions are:

 

- What firewall rules do I need to set up on which interface.

- What setting should the client have as the default gateway?

- What setting should the client have as the proxy server? Do I need to set up a proxy server on PFSense?

 

Any help would be gladly appreciated as I'm going round in circles here!

[cpjitservices]

your firewall rules will be set on the internet side to protect your LAN but it's only specific rules... pfsense on it's own does a pretty good job of blocking stuff anyway check out the firewall logs.

[ben604]

Could you elaborate a little? I seem to have all the firewall rules open for http, but still can't get internet on the client...

[cpjitservices]

Have you got NAT setup properly ? I'll have a look on our pfsense later when I get into work see if I can become familiar with what your trying to do with it and see how ours is setup, me and my colleague did it a lonnnnggggg time ago

[MattGibson]

Hi Everyone,

 

I'm a really big fan of Pfsense, however it seems that my students can see some printer in the school that are located on a completely different network.

 

So I need to tell Pfsense to block all and allow http and https only.

 

Can anyone advise me on how to do this? I've tried but it seems to be blocking everything... I'm also using an upstream proxy do I need to allow port 8080 for this?