Editing PF Sense Firewall Implementation at GIPL (section)

== Firewall Rules :- ==
Reference:- [https://doc.pfsense.org/index.php/Firewall_Rule_Basics https://doc.pfsense.org/index.php/Firewall_Rule_Basics]

Firewall rules control what traffic is allowed to enter an interface on the firewall. Once traffic is passed on the interface it enters an entry in the state table is created. A state table entry allows through subsequent packets that are part of that connection.

Firewall rules are managed at Firewall > Rules. Multiple rules may be selected for some actions by clicking on their row or checking the box at the start of their row. Rules may be deleted or reordered in bulk in this way. See Managing Lists of Items on pfSense for more information on the meaning of the icons when manipulating rules.

* '''any''' - ''0.0.0.0'' to ''255.255.255.255'', or all IPv6 addresses 
* '''Single host or alias''' - Select this and enter one IP address (''1.2.3.4'', ''aa:bb:cc:dd::1'') or type the name of an Alias that has already been configured ('''Firewall > Aliases''') 
* '''Network''' - Select this and enter a network and mask (''10.99.0.0/16'', ''aa:bb:cc:dd::0/64'') 
* '''LAN net''' - The subnet configured on the LAN interface under '''Interfaces > LAN'''. On pfSense 2.2+, this also includes static route networks on that interface. 
* '''LAN address''' - The IP address configured on the LAN interface under '''Interfaces > LAN''' 
* '''zzz Net''' / '''zzz address''' - Works the same as LAN above but for other interfaces (WAN, OPT1, OPT2, etc.) 
* '''PPTP clients''' - Automatically locate and use the addresses of PPTP clients 
* '''L2TP clients''' - Automatically locate and use the addresses of L2TP clients 
* '''This Firewall (self)''' - Any IP address assigned to any interface on this firewall (pfSense 2.2+) 

Firewall rules are generally processed starting with Floating Rules, then Interface Group rules, then Interface tab rules


Rules Created on bridge interface, for DMZ access


[[Image:Gpil-031.jpg]]


[[Image:Gpil-032.jpg]]

'''LAN interface Rules Created:-'''


[[Image:Gpil-033.jpg]]