DOCSLIB.ORG

The Pfsense Book Release

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
The Pfsense Book Release The pfSense Book Release The pfSense Team May 10, 2017 CONTENTS 1 Preface 1 1.1 Acknowledgements...........................................1 1.2 Feedback.................................................3 1.3 Typographic Conventions........................................3 1.4 Authors..................................................4 2 Foreword 7 3 Introduction 9 3.1 What does pfSense stand for/mean?...................................9 3.2 Why FreeBSD?..............................................9 3.3 Common Deployments.......................................... 10 3.4 Interface Naming Terminology..................................... 11 3.5 Finding Information and Getting Help.................................. 12 3.6 Project Inception............................................. 13 4 Networking Concepts 15 4.1 Understanding Public and Private IP Addresses............................. 15 4.2 IP Subnetting Concepts......................................... 16 4.3 IP Address, Subnet and Gateway Configuration............................. 16 4.4 Understanding CIDR Subnet Mask Notation.............................. 17 4.5 CIDR Summarization.......................................... 18 4.6 Broadcast Domains............................................ 19 4.7 IPv6.................................................... 19 4.8 Brief introduction to OSI Model Layers................................. 32 5 Hardware 33 5.1 Minimum Hardware Requirements................................... 33 5.2 Hardware Selection........................................... 33 5.3 Hardware Sizing Guidance........................................ 34 5.4 Hardware Tuning and Troubleshooting................................. 38 5.5 Hardware Compatibility......................................... 39 6 Installing and Upgrading 41 6.1 Download Installation Media...................................... 41 6.2 Prepare Installation Media........................................ 43 6.3 Connect to the Console.......................................... 48 6.4 Perform the Installation......................................... 51 6.5 Assign Interfaces............................................. 55 6.6 Alternate Installation Techniques.................................... 57 6.7 Installation Troubleshooting....................................... 58 i 6.8 Upgrading an Existing Installation.................................... 60 6.9 Filesystem Tweaks............................................ 63 7 Configuration 65 7.1 Setup Wizard............................................... 65 7.2 Interface Configuration.......................................... 72 7.3 Managing Lists in the GUI........................................ 74 7.4 Quickly Navigate the GUI with Shortcuts................................ 74 7.5 General Configuration Options...................................... 75 7.6 Advanced Configuration Options.................................... 77 7.7 Console Menu Basics.......................................... 98 7.8 Time Synchronization.......................................... 104 7.9 Troubleshooting............................................. 106 7.10 pfSense XML Configuration File.................................... 109 7.11 What to do when locked out of the WebGUI.............................. 110 7.12 Connecting to the WebGUI....................................... 114 8 Interface Types and Configuration 117 8.1 Interface Groups............................................. 117 8.2 Wireless................................................. 119 8.3 VLANs.................................................. 119 8.4 QinQs................................................... 119 8.5 Bridges.................................................. 119 8.6 OpenVPN................................................ 119 8.7 PPPs................................................... 120 8.8 GRE (Generic Routing Encapsulation)................................. 123 8.9 GIF (Generic tunnel InterFace)..................................... 123 8.10 LAGG (Link Aggregation)........................................ 124 8.11 Interface Configuration.......................................... 126 8.12 IPv4 WAN Types............................................. 128 8.13 IPv6 WAN Types............................................. 130 8.14 Physical and Virtual Interfaces...................................... 132 9 User Management and Authentication 133 9.1 User Management............................................ 133 9.2 Authentication Servers.......................................... 136 9.3 External Authentication Examples.................................... 139 9.4 Troubleshooting............................................. 141 9.5 Support Throughout pfSense....................................... 143 10 Certificate Management 145 10.1 Certificate Authority Management.................................... 145 10.2 Certificate Management......................................... 148 10.3 Certificate Revocation List Management................................ 152 10.4 Basic Introduction to X.509 Public Key Infrastructure......................... 154 11 Backup and Recovery 157 11.1 Making Backups in the WebGUI..................................... 157 11.2 Using the AutoConfigBackup Package................................. 157 11.3 Alternate Remote Backup Techniques.................................. 160 11.4 Restoring from Backups......................................... 161 11.5 Backup Files and Directories with the Backup Package......................... 164 11.6 Caveats and Gotchas........................................... 165 11.7 Backup Strategies............................................ 166 ii 12 Firewall 167 12.1 Firewalling Fundamentals........................................ 167 12.2 Ingress Filtering............................................. 169 12.3 Egress Filtering.............................................. 169 12.4 Introduction to the Firewall Rules screen................................ 172 12.5 Aliases.................................................. 176 12.6 Firewall Rule Best Practices....................................... 183 12.7 Rule Methodology............................................ 185 12.8 Configuring firewall rules........................................ 190 12.9 Floating Rules.............................................. 196 12.10 Methods of Using Additional Public IP Addresses........................... 198 12.11 Virtual IP Addresses........................................... 201 12.12 Time Based Rules............................................ 203 12.13 Viewing the Firewall Logs........................................ 205 12.14 How Do I Block access to a Web Site?................................. 209 12.15 Troubleshooting Firewall Rules..................................... 210 13 Network Address Translation 213 13.1 Port Forwards.............................................. 213 13.2 1:1 NAT................................................. 219 13.3 Ordering of NAT and Firewall Processing................................ 222 13.4 NAT Reflection.............................................. 224 13.5 Outbound NAT.............................................. 227 13.6 Choosing a NAT Configuration..................................... 230 13.7 NAT and Protocol Compatibility..................................... 231 13.8 IPv6 Network Prefix Translation (NPt)................................. 234 13.9 Troubleshooting............................................. 236 13.10 Default NAT Configuration....................................... 239 14 Routing 241 14.1 Gateways................................................. 241 14.2 Gateway Settings............................................. 242 14.3 Gateway Groups............................................. 245 14.4 Static Routes............................................... 245 14.5 Routing Public IP Addresses....................................... 249 14.6 Routing Protocols............................................ 252 14.7 Route Troubleshooting.......................................... 254 15 Bridging 259 15.1 Creating a Bridge............................................. 259 15.2 Advanced Bridge Options........................................ 259 15.3 Bridging and Interfaces......................................... 262 15.4 Bridging and firewalling......................................... 264 15.5 Bridging Two Internal Networks..................................... 265 15.6 Bridging interoperability......................................... 266 15.7 Types of Bridges............................................. 267 15.8 Bridging and Layer 2 Loops....................................... 268 16 Virtual LANs (VLANs) 269 16.1 Terminology............................................... 269 16.2 VLANs and Security........................................... 270 16.3 pfSense VLAN Configuration...................................... 271 16.4 Switch VLAN Configuration....................................... 275 16.5 pfSense QinQ Configuration....................................... 285 16.6 Requirements............................................... 287 iii 17 Multiple WAN Connections 289 17.1 Multi-WAN Terminology and Concepts................................. 289 17.2 Policy Routing, Load Balancing and Failover Strategies........................ 291 17.3 Multi-WAN Caveats and Considerations................................. 292 17.4 Summary of Multi-WAN Requirements................................. 294 17.5 Load Balancing and Failover with Gateway Groups..........................
Load more

Recommended publications
  • PC-BSD 9 Turns a New Page
    CONTENTS Dear Readers, Here is the November issue. We are happy that we didn’t make you wait for it as long as for October one. Thanks to contributors and supporters we are back and ready to give you some usefull piece of knowledge. We hope you will Editor in Chief: Patrycja Przybyłowicz enjoy it as much as we did by creating the magazine. [email protected] The opening text will tell you What’s New in BSD world. It’s a review of PC-BSD 9 by Mark VonFange. Good reading, Contributing: especially for PC-BSD users. Next in section Get Started you Mark VonFange, Toby Richards, Kris Moore, Lars R. Noldan, will �nd a great piece for novice – A Beginner’s Guide To PF Rob Somerville, Erwin Kooi, Paul McMath, Bill Harris, Jeroen van Nieuwenhuizen by Toby Richards. In Developers Corner Kris Moore will teach you how to set up and maintain your own repository on a Proofreaders: FreeBSD system. It’s a must read for eager learners. Tristan Karstens, Barry Grumbine, Zander Hill, The How To section in this issue is for those who enjoy Christopher J. Umina experimenting. Speed Daemons by Lars R Noldan is a very good and practical text. By reading it you can learn Special Thanks: how to build a highly available web application server Denise Ebery with advanced networking mechanisms in FreeBSD. The Art Director: following article is the �nal one of our GIS series. The author Ireneusz Pogroszewski will explain how to successfully manage and commission a DTP: complex GIS project.
    [Show full text]
  • MNHO-068 DATASHEET Intel® J1900 4 LAN 1 COM Wifi 4G Firewall Router Mini Server
    MNHO-068 DATASHEET Intel® J1900 4 LAN 1 COM WiFi 4G Firewall Router Mini Server https://www.pondesk.com/product/MNHO-068 Features ● Small Security Gateway, Firewall Router, Mini Server ● Intel® Celeron® J1900 Quad Core Processor ● 4 Threads, 2M Cache, up to 2.42 GHz ● Four Intel 82574L Gigabit Ethernet ● Support Network wake-up/PXE ● RJ45-DB9 COM (Cisco Standard) ● Support WiFi, 3G/4G WWAN Networks (optional) ● Watchdog (L256, 0~255 seconds) ● Support up to 8GB DDR3L Memory ● Support Dual Storage (mSATA SSD & 2.5" SATA SSD/HDD) ● VGA Display, USB 2.0 ● Intel® HD Graphics ● Energy Efficient 10W (idle) Low Power Consumption ● Ready for IoT - Simply Connected Using 3G/4G LTE via Mini PCIe ● Support Windows/Linux/Unix/MikroTik/Firewalls etc. ● Can be configured as a Firewall, LAN/WAN Router, VPN, DNS Server, DHCP Server ● Perfect for Security Gateway, Server, VPN and Firewall such as pfSense, Untangle, ● Sophos, Smoothwall, ClearOS, m0n0wall etc. Specifications Dimensions Processor Advanced Technologies Intel® Celeron® Processor J1900 Intel® Virtualization Technology (VT-x) 4 Core, 4 Threads Intel® 64 2M Cache, up to 2.42 GHz Enhanced Intel SpeedStep® Technology Memory Onboard I/O Support up to 8GB 1 x JVGA1 (2*12pin) W DDR3L SODIMM 1.35V Low Voltage 1 x SYS FAN (1*3pin) Single Sided non-ECC Memory 1 x CPU FAN (1*4pin) One Memory Slot 1 x ATX_4P +12V 1 x COM (2*5pin) Storage 1 x SATA2.0 Support 1 x mSATA SSD 1 x JLAN_LED (2*8pin) L H Support 1 x 2.5" SATA SSD/HDD 1 x Full height mini PCIe (For WiFi & 3G module) LAN 1 x mSATA (For SSD) 197mm
    [Show full text]
  • Kratka Povijest Unixa Od Unicsa Do Freebsda I Linuxa
    Kratka povijest UNIXa Od UNICSa do FreeBSDa i Linuxa 1 Autor: Hrvoje Horvat Naslov: Kratka povijest UNIXa - Od UNICSa do FreeBSDa i Linuxa Licenca i prava korištenja: Svi imaju pravo koristiti, mijenjati, kopirati i štampati (printati) knjigu, prema pravilima GNU GPL licence. Mjesto i godina izdavanja: Osijek, 2017 ISBN: 978-953-59438-0-8 (PDF-online) URL publikacije (PDF): https://www.opensource-osijek.org/knjige/Kratka povijest UNIXa - Od UNICSa do FreeBSDa i Linuxa.pdf ISBN: 978-953- 59438-1- 5 (HTML-online) DokuWiki URL (HTML): https://www.opensource-osijek.org/dokuwiki/wiki:knjige:kratka-povijest- unixa Verzija publikacije : 1.0 Nakalada : Vlastita naklada Uz pravo svakoga na vlastito štampanje (printanje), prema pravilima GNU GPL licence. Ova knjiga je napisana unutar inicijative Open Source Osijek: https://www.opensource-osijek.org Inicijativa Open Source Osijek je član udruge Osijek Software City: http://softwarecity.hr/ UNIX je registrirano i zaštićeno ime od strane tvrtke X/Open (Open Group). FreeBSD i FreeBSD logo su registrirani i zaštićeni od strane FreeBSD Foundation. Imena i logo : Apple, Mac, Macintosh, iOS i Mac OS su registrirani i zaštićeni od strane tvrtke Apple Computer. Ime i logo IBM i AIX su registrirani i zaštićeni od strane tvrtke International Business Machines Corporation. IEEE, POSIX i 802 registrirani i zaštićeni od strane instituta Institute of Electrical and Electronics Engineers. Ime Linux je registrirano i zaštićeno od strane Linusa Torvaldsa u Sjedinjenim Američkim Državama. Ime i logo : Sun, Sun Microsystems, SunOS, Solaris i Java su registrirani i zaštićeni od strane tvrtke Sun Microsystems, sada u vlasništvu tvrtke Oracle. Ime i logo Oracle su u vlasništvu tvrtke Oracle.
    [Show full text]
  • Introduzione Al Mondo Freebsd Corso Avanzato
    Introduzione al mondo FreeBSD corso Avanzato •Struttura •Installazione •Configurazione •I ports •Gestione •Netstudent http://netstudent.polito.it •E.Richiardone [email protected] •Novembre 2012 •CC-by http://creativecommons.org/licenses/by/3.0/it/ The FreeBSD project - 1 • E` un progetto software open • Lo scopo e` mantenere e sviluppare il sistema operativo FreeBSD • Nasce su CDROM come FreeBSD 1.0 nel 1993 • Deriva da un patchkit per 386BSD, eredita codice da UNIX versione Berkeley 1977 • Per problemi legali subisce un rallentamento, release 2.0 nel 1995 con codice royalty-free • Dalla release 4.0 (2000) assume la struttura che ha oggi • Disponibile per x86 32 e 64bit, ia64, MIPS, ppc, sparc... • La mascotte (Beastie) nasce nel 1984 The FreeBSD project - 2 • Erede di 4.4BSD (e` la stessa gente...) • Sistema stabile; sviluppo uniforme; codice molto chiaro, ordinato e ben commentato • Documentazione ufficiale ben curata • Licenza molto permissiva, spesso attrae aziende per progetti commerciali: • saltuariamente progetti collaborano con implementazioni ex-novo (i.e. Intel, GEOM, NDISwrapper, ZFS, GNU/Linux emulation) • Semplificazione di molte caratteristiche tradizionali UNIX Di cosa si tratta Il progetto FreeBSD include: • Un sistema base • Bootloader, kernel, moduli, librerie di base, comandi e utility di base, servizi tradizionali • Sorgenti completi in /usr/src (~500MB) • E` gia` completo (i.e. ipfw, ppp, bind, ...) • Un sistema di gestione per software aggiuntivo • Ports e packages • Documentazione, canali di assistenza, strumenti
    [Show full text]
  • Virtual Router Performance
    SOFTWARE DEFINED NETWORKING: VIRTUAL ROUTER PERFORMANCE Bachelor Degree Project in Network and System Administration Level ECTS Spring term 2016 Björn Svantesson Supervisor: Jianguo Ding Examiner: Manfred Jeusfeld Table of Contents 1Introduction..........................................................................................................................................1 2Background...........................................................................................................................................2 2.1Virtualization................................................................................................................................2 2.2Hypervisors...................................................................................................................................2 2.3VMware ESXi................................................................................................................................2 2.4Software defined networking.......................................................................................................3 2.5The split of the data and control plane........................................................................................3 2.6Centralization of network control................................................................................................4 2.7Network virtualization..................................................................................................................4 2.8Software routers..........................................................................................................................6
    [Show full text]
  • Xg-7100-Security-Gateway-Manual.Pdf
    Security Gateway Manual XG-7100 © Copyright 2021 Rubicon Communications LLC Sep 24, 2021 CONTENTS 1 Out of the Box 2 2 How-To Guides 21 3 References 53 i Security Gateway Manual XG-7100 This Quick Start Guide covers the first time connection procedures for the Netgate® 7100 Desktop Firewall Appliance and will provide the information needed to keep the appliance up and running. Tip: Before getting started, we recommend downloading the PDF version of the Product Manual and the PDF version of the pfSense Documentation in case you lose Internet access. © Copyright 2021 Rubicon Communications LLC 1 CHAPTER ONE OUT OF THE BOX 1.1 Getting Started The basic firewall configuration begins with connecting the Netgate® appliance to the Internet. The Netgate appliance should be unplugged at this time. Connect one end of an Ethernet cable to the WAN port (shown in the Input and Output Ports section) of the Netgate appliance. The other end of the same cable should be inserted into a port of the Cable or DSL modem. The modem provided by the ISP should have multiple LAN ports. Any port should work. Next, connect one end of a second Ethernet cable to the LAN port (shown in the Input and Output Ports section) of the Netgate appliance. Connect the other end to the computer. 2 Security Gateway Manual XG-7100 Warning: The default IP Address on the LAN subnet on the Netgate firewall is 192.168.1.1/24. The same subnet cannot be used on both WAN and LAN, so if the default IP address on the ISP-supplied modem is also 192.168.1.1/24, disconnect the WAN interface until the LAN interface on the firewall has been renumbered to a different subnet (like 192.168.2.1/24).
    [Show full text]
  • Limits and the Practical Usability of Bsds, a Big Data Prospective
    Limits and the Practical Usability of BSDs, a Big Data Prospective Predrag Punosevacˇ [email protected] The Auton Lab Carnegie Mellon University June 11, 2016 1 / 22 Thanks Thanks to organizers for this great meeting and for giving me the op- portunity to speak. note 1 of slide 1 Intro ❖ Intro ● Who am I? ❖ Chronology ❖ Chronology II ❖ Genealogy Tree ❖ General Limitations ❖ Scientific Computing ❖ Continuation ❖ misc issues ❖ NetBSD ❖ OpenBSD ❖ pf.conf and pfctl ❖ OpenBSD cons ❖ FreeBSD ❖ TrueOS ❖ TurnKey Appliance ❖ FreeNAS ❖ pfSense ❖ DragonFly BSD ❖ HAMMER ❖ Dark Clouds ❖ References 2 / 22 Intro ❖ Intro ● Who am I? ❖ Chronology ❖ Chronology II ❖ Genealogy Tree ● What is the Auton Lab? ❖ General Limitations ❖ Scientific Computing ❖ Continuation ❖ misc issues ❖ NetBSD ❖ OpenBSD ❖ pf.conf and pfctl ❖ OpenBSD cons ❖ FreeBSD ❖ TrueOS ❖ TurnKey Appliance ❖ FreeNAS ❖ pfSense ❖ DragonFly BSD ❖ HAMMER ❖ Dark Clouds ❖ References 2 / 22 Intro ❖ Intro ● Who am I? ❖ Chronology ❖ Chronology II ❖ Genealogy Tree ● What is the Auton Lab? ❖ General Limitations ❖ Scientific ● Why don’t we just use SCS computing facilities? Computing ❖ Continuation ❖ misc issues ❖ NetBSD ❖ OpenBSD ❖ pf.conf and pfctl ❖ OpenBSD cons ❖ FreeBSD ❖ TrueOS ❖ TurnKey Appliance ❖ FreeNAS ❖ pfSense ❖ DragonFly BSD ❖ HAMMER ❖ Dark Clouds ❖ References 2 / 22 Intro ❖ Intro ● Who am I? ❖ Chronology ❖ Chronology II ❖ Genealogy Tree ● What is the Auton Lab? ❖ General Limitations ❖ Scientific ● Why don’t we just use SCS computing facilities? Computing ❖ Continuation ❖ misc issues ● How did
    [Show full text]
  • The Open Source Firewall in Practice
    OPNsense The open source fi rewall in practice Table of contents 1. How companies can benefit from OPNsense 3| 2. What makes OPNsense unique? 4| 2.1 The OPNsense Business Edition 3. A closer look at OPNsense 5| 3.1 Intrusion and malware detection 6| 3.2 Virtual Private Networking (VPN) 3.3 High availability 7| 3.4 Traffic analysis and traffic shaping 3.5 Further features in the core system 3.6 Plugins 8| 4. Hardware for OPNsense 8| 5. Using OPNsense 8| 5.1 Example customer A: 9| An SME specializing in the production of technical ropes 5.2 Example customer B: An SME consulting firm in the social sector 6. Plugins for OPNsense 9| 7. Transparent development model 10| 8. Plugins in an example scenario 10| 8.1 Centralized WLAN protection with the FreeRADIUS plugin 10| 8.2 Securing an Exchange Server with the Postfix plugin 14| 8.3 Monitoring with the Telegraf plugin 18| 8.4 NUT plugin for UPS integration 21| Summary 22| thomas-krenn.com | 3 OPNsense The open source fi rewall in practice Comprehensive IT security and fl exibly expandable plugins. IT managers regularly see the IT they manage intrusion detection & prevention, VPN, two- exposed to new threats. Having the latest fi rewall factor authentication and high availability. In this is no longer suffi cient. It is much more important e-book, we present OPNsense as an alternative to be able to react fl exibly to security risks. The to commercial fi rewall solutions. Our focus is on open source fi rewall OPNsense is a digital platform practical use cases in the SME context and on how that offers many additional features such as functionality can be expanded via plugins.
    [Show full text]
  • Pfsense Minimum Hardware Requirements
    Pfsense Minimum Hardware Requirements Reputable and childlike Ike derails: which Mahesh is wriest enough? How ethereous is Dudley when retaliative and seamy Randal frisk some distresses? Pavel scales smartly. Could be assigned as the minimum hardware requirements can We have the amount of the maximum throughput bottleneck is a wireless coverage and. Need to minimum, multi core pretty light switches to assign vlans is required firewall, existing processing units, most legitimate idle consumption parts, files are minimum hardware accelerated ciphers. That you find ways, the next article. After it over hardening from a wide range. Suggest nmap scan on the power use in all replies will assume that makes mac addresses to boot time and latest version vs range extenders. Provide details and a methane rich atmosphere: is for the web interface should have downloaded operating systems share most importantly, provided when considering memory. What network hardware requirements, if you are you. In or a registered trademark of the option. Ethernet interface on the only show half the role of separate it automation, most convenient option if the verification code cannot touch with gigabit and. Or run a router, so that sound the correct, my tests to read about by just trying smoothwall and why you. Not require a minimum requirements for the experience, requiring state if the better than the usb card can be converted to. The pfsense router, low end goal before beginning the pfsense hardware. Ensure it supports improved significantly reducing the pfsense minimum hardware requirements. Not high demand wireless lan, that could result in speed. Once it will be hardware running custom adblocking scripts or subnets set a pfsense hardware requirements specific taste combined with pfsense rigs for a faster.
    [Show full text]
  • Setting up a Secure Network Using Pfsense Tyler Thompson
    Setting Up a Secure Network Using pfSense Tyler Thompson I’ve been working in IT for a number of years and my knowledge in networking mainly comes from work experience and self-teaching, so I’m really only scratching the surface of the subject with this paper. There are many different types of networking devices that can be used as a firewall/routing solution, but I set up my home network with pfSense. When I began looking for a new routing solution, I was looking for something that gave me full control of the security and traffic flow of my network. I chose pfSense because it is capable of providing business-grade network management for free and it was the best I could find after trying many others. What is pfSense? pfSense is an open-source firewall/router operating system based on FreeBSD. It can be installed on a normal consumer-grade computer, such as a desktop. It provides terminal and web interfaces to the user and is capable of providing services normally only found on business-grade networking devices. See the links below for more details. https://www.pfsense.org/ https://en.wikipedia.org/wiki/PfSense Basic Home Network Figure 1 shows the network topology of a typical home network. This diagram divides all the “moving parts” of the network into separate devices. In practice, it is typical for some of these devices to be combined into one device. For example, newer modems Comcast supplies have the modem, firewall, router, switch, and wifi access point all in one device.
    [Show full text]
  • How to Configure Openvpn Shared Key Tunnels Using Pfsense and Openwrt
    How to configure OpenVPN shared key tunnels using pfSense and OpenWRT. Ver. 1.0 (11.1.2006) Author: Ville Leinonen Intro In this document I try to explain how to configure ssl-based site-to-site tunnels using pfSense /1/ and OpenWRT /2/. In this example I use shared key, because it’s easiest way to set up site-to-site tunnel. Bad thing for this is that I can use only one tunnel/key, but it’s enough for me. This document assume that reader have some experience how to use pfSense and OpenWRT. Enviroment Bellow is picture for this document example environment. WAN address for pfSense is picked up in my head. Picture 1. Example network environment. Home office: LAN: 10.0.0.0/24 WAN: dhcp Tun0: 10.0.8.2 pfSense: LAN: 192.168.0.0/24 WAN: 212.212.212.1 Tun0: 10.0.8.1 Generating key You must generate shared static key. Step 1. Take ssh session to your pfSense firewall. Step 2. Select 8 and press enter. pfSense console setup *********************** 0) Logout (SSH only) 1) Assign Interfaces 2) Set LAN IP address 3) Reset webConfigurator password 4) Reset to factory defaults 5) Reboot system 6) Halt system 7) Ping host 8) Shell 9) PFtop 10) Filter Logs 11) Restart webConfigurator Enter an option: 8 Step 3. Generate key # openvpn --genkey --secret /tmp/myshared.key Example key: # more /tmp/myshared.key # # 2048 bit OpenVPN static key # -----BEGIN OpenVPN Static key V1----- ef9b9f0bff2268eb3966d6a408398db1 f7e6f9823402c76560d1ce25b8d46be4 1c58e656d2e7633d2481e74b9e328618 3c9e6a7528a46b2474bc08838ae19a4c 7f19878bd381cf8cfb0c4dc14fa52622 7360921e50710d0af689476388df0a25 54e1e86b2c9fcc4139dba763b97861bc 36cd477c6f293e8ca07e1bffaba697bf 948b65c213c5747cf0645fb7886bac4b 893953f697640dff961b95cfd8d2c0f3 ef976540e9c004ed72494648462496be 969a70e7d53910f3415f8d829bdb192e b4aad90e91baec25cac0b260205823e9 e945938896fdd9d33a56c44b90cbd5ce 0d0373923e2cdd33192fdfb4d06399fd 9eb0321402aadb116004721c5249ce61 -----END OpenVPN Static key V1----- Step 4.
    [Show full text]
  • Pfsense Tutorial Slides (Application/Pdf
    pfSense Tutorial BSDCan 2008 From zero to hero with pfSense May 13, 2008 Chris Buechler <[email protected]> Scott Ullrich <[email protected]> History of pfSense Started as a work project 13 years ago when we needed a internal firewall Originally Linux, switched to FreeBSD 2.2 Evolution of this path shrunk the firewall down to a Soekris size Moatware was started Met Chris Buechler during this time Sell a number of products Sales guy moves to Florida Moatware fails Chris and myself debate starting over fresh pfSense is forked from m0n0wall roughly 4 years ago Still going strong today pfSense Overview Customized FreeBSD distribution tailored for use as a firewall and router. pfSense has many base features and can be extended with the package system including one touch installations of popular 3rd party packages such as SpamD (spam filter) and Squid (web caching). Includes many features found in commercial products such as Cisco PIX, Sonicwall, Watchguard, etc. Many support avenues available, mailing lists, forum and commercial support. Has the best price on the planet.... Free! pfSense Platforms Live CD Full Install Embedded Developers pfSense Stable Versions 1.0 - October 4, 2006 * 1.0.1 - October 20, 2006 * 1.2 - RELENG_1_2 - February 25, 2008 Downloaded more than 500,000 times to date * Not branched in CVS pfSense Development Versions Current Development Versions 1.3-ALPHA - RELENG_1 2.0-ALPHA-ALPHA-ALPHA - HEAD Snapshots are built every two hours available at http://snapshots.pfsense.org Bonus for attendees - 1.3 snapshots
    [Show full text]