Rogue Security Wiki

Practical procedure and troubleshooting notes for Firewall Rules for a Webserver in DMZ.

  1. Log in to pfSense.
  2. Click on Firewall.
    Firewall menu
  3. Select Rules.
    Firewall rules
  4. Click on the interface you are configuring (for example, DMZ).
  5. Click Add to create a new rule.
    Add new firewall rule
  6. Configure the rule to allow HTTP (port 80) traffic from the WAN to your web server in the DMZ.
    Allow HTTP rule configuration - part 1
    Allow HTTP rule configuration - part 2
  7. Scroll down and click Save.
    Save firewall rule
  8. Click the Copy icon next to the newly created rule to duplicate it.
    Copy firewall rule
  9. Change the Destination Port to 443 for HTTPS traffic.
    Change destination port to 443
  10. Update the Description to indicate the rule is for HTTPS.
    Update rule description
  11. Scroll down and click Save.
    Save HTTPS rule