User Tools

Site Tools


software:pfsense

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Last revisionBoth sides next revision
software:pfsense [2016/01/23 21:45] superwizardsoftware:pfsense [2018/01/02 20:44] – [pfsense ipv6 with comcast] superwizard
Line 1: Line 1:
 +====== Firewall Rule Basics ======
 +
 +From: https://doc.pfsense.org/index.php/Firewall_Rule_Basics
 +
 +<code>
 +any - 0.0.0.0 to 255.255.255.255, or all IPv6 addresses
 +
 +Single host or alias - Select this and enter one IP address (1.2.3.4, aa:bb:cc:dd::1) or type the name of an Alias that has already been configured (Firewall > Aliases)
 +
 +Network - Select this and enter a network and mask (10.99.0.0/16, aa:bb:cc:dd::0/64)
 +
 +LAN net - The subnet configured on the LAN interface under Interfaces > LAN. On pfSense 2.2+, this also includes IP alias networks on that interface.
 +
 +LAN address - The IP address configured on the LAN interface under Interfaces > LAN
 +
 +zzz Net / zzz address - Works the same as LAN above but for other interfaces (WAN, OPT1, OPT2, etc.)
 +
 +PPTP clients - Automatically locate and use the addresses of PPTP clients
 +
 +L2TP clients - Automatically locate and use the addresses of L2TP clients
 +
 +This Firewall (self) - Any IP address assigned to any interface on this firewall (pfSense 2.2+)
 +</code>
 +
 ====== Installing the Ubiquiti UniFi Controller Software on pfSense 2.2 ====== ====== Installing the Ubiquiti UniFi Controller Software on pfSense 2.2 ======
  
Line 86: Line 110:
    
 ====== pfsense ipv6 with comcast ====== ====== pfsense ipv6 with comcast ======
 +
 +From: http://undergroundmod.com/2016/08/25/pfsense-ipv6-with-comcast/
  
 From: https://r.wundrd.net/article/pfsense-ipv6-comcast/ From: https://r.wundrd.net/article/pfsense-ipv6-comcast/
Line 100: Line 126:
 </code> </code>
  
 +From: https://forum.pfsense.org/index.php?topic=83576.0
  
 +
 +<code>
 +Comcast will let you request no more than a /60. 16 /64 subnets on a personal network should be 
 +more than enough for most people.
 +
 +Business class service may be able to request larger allocations, but consumer service can request 
 +anything from /64 to /60 only, depending on how many subnets you need (1 to 16, based on number of bits).
 +
 +Because of pfSense's IPv6 implementation with DHCPv6 on the WAN, there is no way to set up a static 
 +IPv6 address for your router on your LAN. You set up "Track Interface", "WAN", then select which subnet 
 +you want to use (which will only be 0 if you request a /64, could be 0-F if you request a /60). The LAN 
 +interface gets a SLAAC address based on the interface's MAC address.
 +</code>
 +
 +{{ :software:2018-01-02_15_33_50-_diagnostics_edit_file.png?direct&600 |}}
 +
 +
 +{{ :software:2018-01-02_15_36_37-_interfaces_wan.png?direct&600 |}}
 +
 +{{ :software:2018-01-02_15_38_34-_interfaces_lan-general.png?direct&600 |}}
 +
 +{{ :software:2018-01-02_15_39_25-_interfaces_lan-track.png?direct&600 |}}
 +
 +{{ :software:2018-01-02_15_43_02-_services_dhcpv6_server_ra_lan_dhcpv6_server.png?direct&600 |}}
 ====== CONFIGURING DHCP SERVER AND DYNAMIC DNS SERVICES ====== ====== CONFIGURING DHCP SERVER AND DYNAMIC DNS SERVICES ======
  
Line 201: Line 252:
 http://www.onlineconversion.com/unix_time.htm http://www.onlineconversion.com/unix_time.htm
 ====== Squid Configuration ====== ====== Squid Configuration ======
- 
  
 === Cache management page === === Cache management page ===
software/pfsense.txt · Last modified: 2018/01/06 04:12 by superwizard