Basic Setup and Configuring pfsense Firewall Rules For Home

27 thoughts on “Basic Setup and Configuring pfsense Firewall Rules For Home”

• Official Netgate pfsense documentation on firewall rules
  https://docs.netgate.com/pfsense/en/latest/firewall/rule-methodology.html

  LTS Curated pfsense Tutorials
  https://lawrence.technology/pfsense/

  Getting Stared with pfsense firewall rules
  https://youtu.be/eb1pTs7XamA

  How To Setup VLANS With pfsense & UniFI. Also how to build for firewall rules for VLANS in pfsense
  https://youtu.be/b2w1Ywt081o

  Office Network Design and Planning with VLANs, LLDP, Rules, IoT, Guest using UniFi & pfsense
  https://youtu.be/ouARr-4chJ8

  How To Setup pfsense OpenVPN Policy Routing With Kill Switch Using A Privacy VPN
  https://youtu.be/ulRgecz0UsQ

  Tutorial: pfsense Wireguard For Remote Access
  https://youtu.be/8jQ5UE_7xds

  ⏱ Timestamps ⏱

  00:00 pfsense Home Firewall Rules
  02:00 Diagrams.net Devices & Networks
  06:30 pfsense NAT rules
  07:04 WAN Firewall Rules
  08:16 IOT & LAN Rules

• You skipped the PIA_VPN. Would love to see what/how your route out through the VPN.

  I'm not sure if you have a video about it already but would love to learn about how to join networks across sites. I have 3-4 locations with devices that I want to communicate more directly. I was planning a Wireguard connection between each of them. Not sure if there is a better way.

• Sir, how do I direct the speedtest on Multiwan to a specific ISP?

• I love your videos. My question is how to prevent devices like my refrigerator and TVs from scanning the netowork for other devices and information the same interface.

• Can someone explain how do I bind the admin interface of all my services to another IP?

• Pretty cool setup- I guess you run separate switches and a separate wifi access point(s) connected to separate interfaces for each of these networks, right? I am running a Protectli 4-port box and have an interface designated for PIA in addition to WAN and LAN. Thanks.

• Whats the best way to have plex and a vpn while not messing up plex? also what vpn is best for it in your opinion?

• Hi Laurence you are a reference abroad for me, your knowledge is precious, and exactly that the fact that you explain things easily and right to the point.

• Tom, Your NAS has 4 NIC's, ? What type of Synology NAS are you using ? I presume your phone can access the camera's with the DS cam app right ?

• Hi does the Ubiquiti UniFi Dream Machine support Wireguard out of the box, or do I have to look at the Netgate SG-2100 ?

• So, complete noob here and trying to learn, but im assuming you aren't able to remotely view your cameras since it's segmented off?

• first of all, thanks for this great content.
  i managed to make my pfsense setup to work properly but now i'm facing a very annoying issue.
  when my system reboots for example due to a power outage, pfsense cant get the WAN address automatically. i gets WAN as blank.
  any idea what could be happening?

• and where did you get the firewall_Service_port port from ?

• Can psSense do ssl inspection / decryption like the Palo or fortinet? Thx

• the first part of the setup when first getting to the configuration wizard for the basic connection with the modem/router. You didn't cover that part.

• This is one of the best tutorials I have ever seen. Thanks a lot.
  I have two questions:
  1. How Synology will do update? Maybe I missed that part, sorry if that is a case,
  2. How your phones will sync/backup photos to Synology? Phones are on NSFW LAN and devices assigned to that interface cannot see CAMLAN. If I have this use case, what is best approach?

• How to add another wan

• Can you post the config settings for the CamLan info? I for some reason am really stuck on getting this to work. I have a single host I don’t want to reach the internet but I still need it to grab NTP and communicate with the other devices on the same network. I just can’t figure it out. Thanks!

• Is plex running from your synology? How do you separate plex and the synology interface from on the different networks?

• Under-rated and under subscribed channel. Fixed that for myself! Liked and subscribed, looking forward to binge watching your stuff. Cheers mate.

• Unfortunately the business information being advertised in the videos for hire is not reliable information and does not exist.

• pfsense is not recommended Misc upgrades have caused huge issues including having to re-flash your device. Make sure you have backups! I do not recommend them.. sadly

• is this setup as vlan in pfsense to get the separate ip address and a group?

• I'm a fan of pfsense, hands down best in the Industry
  U can use it in ISPs, IXPs, and simple home networks, but for a home network, that sophos home edition is also a nice piece

• VLAN1337 Lit

• I've been a security operations manager for years, and it physically hurt me to see you use one subnet for IOT, Phones, AND a DMZ. Plex is publicly exposed, it goes in a DMZ, there really should not be exceptions to that rule unless you're forced at gunpoint.

  Malware is made for Android devices far more often than any other OS. Your phone has a huge amount of important information, 2 factor authenticators, 2 factor textessages, probably saved passwords, photos, anything sensitive you've said in texts, microphones and cameras that can be accessed if the device is fully compromised, etc. Having your phone on the same network that you're using to expose shit to the public internet is insanity.

• ok; what about cameras like wyze cams and firmware updates

Comments are closed.