Solved Firewall box, is pfsense good?

Discussion in 'Server Operation' started by Taleman, Sep 10, 2018.

  1. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Looks like IPCop is no longer being developed. Is pfsense a suitable firewall to make a firewall box from a computer lying around? I need to firewall with reasonably simple maintenance between Internet and my server boxes.
    Are other tools suitable for the job?
     
  2. SamTzu

    SamTzu Active Member

    Yup. pfSense has been my FW choise several years now because I can put it on a ISP's VM and use it to create a LAN network. I recommend it. Only "problem" recently has been with NAT reflection for LAN VM's on different hardware nodes. But there is a way around that too.
     
  3. florian030

    florian030 Well-Known Member HowtoForge Supporter

    you can also check opnsense
     
    Taleman likes this.
  4. SamTzu

    SamTzu Active Member

    I did. It may eventually be better than pfSense but not anytime soon.
    pfSense has a ton load of 3rd party add-in's (called packages) that can't be beaten any time soon.
     
    Taleman likes this.
  5. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    I decided to install OPNSense. Basic firewalling worked out of the box once I got the outer and inner interfaces the right way.
    I have not yet figured out how to allow SSH from the WAN side. It works from LAN.
     
  6. SamTzu

    SamTzu Active Member

    OpenSense is based on pfSense so you probably have to fill out the Aliases and Virtual IP's first.
    Then create a NAT rule using those. The FW rule should be created automatically from there.
     

Share This Page