pfsense-firewall-rules

Configures pfSense firewall rules, NAT policies, VPN tunnels, and traffic shaping to enforce network segmentation, control traffic flow, and protect internal network zones in enterprise and small-to-medium business environments.

Ir a la instalación

Repositorio: Undermybelt/hermes-skills
Última actividad en el origen: 7 de junio de 2026 a las 07:23
Idioma detectado de SKILL.md: inglés
Estrellas: 6
Forks: 1

Opciones de instalación

De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.

npx skills add https://github.com/Undermybelt/hermes-skills --skill pfsense-firewall-rules

El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.

¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.

Revisa los archivos de origen

Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.

Explorador de archivos

4 archivos

SKILL.md

Instrucciones de origen · Vista previa de solo lectura

Volver a la búsqueda Volver a la instalación

anti-entropy-governance

Use when retiring old logic, collapsing duplicate owners, removing fallbacks, or touching schema, persistence, or source-of-truth boundaries while deciding whether to delete old paths, retain compatibility, or stop for confirmation.

2026-06-07

brainstorming

Use when defining new features, product behavior, UI/component design, architecture choices, contract changes, or ambiguous medium/high-complexity work before implementation.

2026-06-07

communicating-concisely

Use when the user asks for caveman mode, fewer tokens, brief responses, compressed communication, or otherwise explicitly requests a much shorter answer.

2026-06-07

Ver todos los de este repositorio

name	pfsense-firewall-rules
description	Configures pfSense firewall rules, NAT policies, VPN tunnels, and traffic shaping to enforce network segmentation, control traffic flow, and protect internal network zones in enterprise and small-to-medium business environments.
domain	cybersecurity
subdomain	network-security
tags	["network-security","pfsense","firewall","nat","network-segmentation"]
version	1.0
author	mahipal
license	Apache-2.0
nist_csf	["PR.IR-01","DE.CM-01","ID.AM-03","PR.DS-02"]

Configuring pfSense Firewall Rules

When to Use

Deploying a perimeter or internal firewall to segment and protect network zones (DMZ, internal, guest, IoT)
Creating granular access control rules to restrict traffic between VLANs and network segments
Configuring NAT rules for port forwarding to internal services exposed to the internet
Setting up site-to-site or remote access VPN tunnels using IPsec or OpenVPN
Implementing traffic shaping and bandwidth management for quality-of-service requirements

Do not use as a substitute for host-based firewalls on individual systems, for SSL/TLS deep packet inspection without dedicated hardware acceleration, or as the sole security control without complementary IDS/IPS.

Prerequisites

pfSense 2.7+ installed on dedicated hardware or virtual machine with at least two network interfaces
Access to the pfSense WebConfigurator (default: https://192.168.1.1)
Network topology diagram showing all interfaces, VLANs, and desired traffic flow
DNS and DHCP configuration planned for each network zone
Understanding of TCP/IP, NAT, and stateful firewall concepts

Workflow

Step 1: Configure Network Interfaces and VLANs

Access the pfSense WebConfigurator and define interfaces:

Navigate: Interfaces > Assignments

WAN Interface (igb0):
  - Type: DHCP or Static IP from ISP
  - Block private networks: Enabled
  - Block bogon networks: Enabled

LAN Interface (igb1):
  - IPv4: 10.10.1.1/24
  - Description: CORPORATE_LAN

Create VLANs:
  Navigate: Interfaces > VLANs > Add
  - VLAN 10 on igb1: DMZ (10.10.10.1/24)
  - VLAN 20 on igb1: SERVERS (10.10.20.1/24)
  - VLAN 30 on igb1: GUEST (10.10.30.1/24)
  - VLAN 40 on igb1: IOT (10.10.40.1/24)

Assign VLANs:
  Navigate: Interfaces > Assignments > Add each VLAN
  Enable each interface and assign the gateway IP

Step 2: Configure DHCP and DNS for Each Zone

Navigate: Services > DHCP Server

CORPORATE_LAN (10.10.1.0/24):
  Range: 10.10.1.100 - 10.10.1.200
  DNS: 10.10.20.10 (internal DNS server)
  Gateway: 10.10.1.1

DMZ (10.10.10.0/24):
  Range: 10.10.10.100 - 10.10.10.200
  DNS: 10.10.20.10
  Gateway: 10.10.10.1

GUEST (10.10.30.0/24):
  Range: 10.10.30.100 - 10.10.30.200
  DNS: 1.1.1.1, 8.8.8.8 (public DNS only)
  Gateway: 10.10.30.1

Navigate: Services > DNS Resolver
  Enable DNS Resolver on all interfaces except GUEST
  Enable DNSSEC
  Configure forwarding to upstream DNS servers

Step 3: Create Firewall Rule Aliases

Navigate: Firewall > Aliases

RFC1918_Networks:
  Type: Network
  Values: 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16

WebPorts:
  Type: Port
  Values: 80, 443

ManagementPorts:
  Type: Port
  Values: 22, 3389, 5900

CriticalServers:
  Type: Host
  Values: 10.10.20.10, 10.10.20.11, 10.10.20.12

BlockedCountries:
  Type: URL Table
  URL: https://www.ipdeny.com/ipblocks/data/aggregated/cn-aggregated.zone
  Update: 24 hours

Term	Definition
Stateful Firewall	Firewall that tracks the state of network connections and automatically allows return traffic for established sessions without explicit rules
Alias	Named group of IP addresses, networks, or ports in pfSense that simplifies rule management and improves readability
NAT (Network Address Translation)	Translation of IP addresses between internal and external networks, including port forwarding for inbound access to internal services
Floating Rules	pfSense rules that apply across multiple interfaces simultaneously, processed before per-interface rules
pfBlockerNG	pfSense package that integrates IP reputation blocklists and DNS-based blocklists for automated threat blocking
Rule Processing Order	pfSense evaluates rules top-to-bottom within each interface tab; first match wins, and unmatched traffic is blocked by default

pfsense-firewall-rules

Opciones de instalación

Revisa los archivos de origen

Configuring pfSense Firewall Rules

When to Use

Prerequisites

Workflow

Step 1: Configure Network Interfaces and VLANs

Step 2: Configure DHCP and DNS for Each Zone

Step 3: Create Firewall Rule Aliases

Configuring pfSense Firewall Rules

When to Use

Prerequisites

Workflow

Step 1: Configure Network Interfaces and VLANs

Step 2: Configure DHCP and DNS for Each Zone

Step 3: Create Firewall Rule Aliases

Step 4: Implement Firewall Rules by Zone

Step 5: Configure NAT Rules

Step 6: Enable Logging and Monitoring

Step 7: Backup and Test Configuration

Key Concepts

Tools & Systems

Common Scenarios

Scenario: Segmenting a Small Business Network with pfSense

Output Format

pfsense-firewall-rules

Datos de origen

Opciones de instalación

Revisa los archivos de origen

Más de este repositorio

Más de este repositorio

Configuring pfSense Firewall Rules

When to Use

Prerequisites

Workflow

Step 1: Configure Network Interfaces and VLANs

Step 2: Configure DHCP and DNS for Each Zone

Step 3: Create Firewall Rule Aliases

Configuring pfSense Firewall Rules

When to Use

Prerequisites

Workflow

Step 1: Configure Network Interfaces and VLANs

Step 2: Configure DHCP and DNS for Each Zone

Step 3: Create Firewall Rule Aliases

Step 4: Implement Firewall Rules by Zone

Step 5: Configure NAT Rules

Step 6: Enable Logging and Monitoring

Step 7: Backup and Test Configuration

Key Concepts

Tools & Systems

Common Scenarios

Scenario: Segmenting a Small Business Network with pfSense

Output Format