pfSense 2 Cookbook

pfSense is an open source distribution of FreeBSD-based firewall which provides a platform for flexible and powerful routing and firewalling. The versatility of pfSense presents us with a wide array of configuration options which, compared to other offerings, makes determining requirements a little more difficult and a lot more important. Through this book, you will see that pfSense offers numerous other alternatives to fit any environment's security needs. This book follows a cookbook style to teach you how to use the features available with pfSense after determining your environment's security requirements. It covers everything from initial configuration of your network interfaces and pfSense services such as DHCP and Dynamic DNS to complex techniques to enable failover and load-balancing. What this book covers Chapter 1, Initial Configuration covers the settings needed for almost every pfSense deployment including those for a firewall, router, and wireless access point. Through the recipes in this chapter, you will learn how to install and configure pfSense with a fully-operational firewall and router. Chapter 2, Essential Services explains how to configure the essential networking services provided by pfSense such as the DHCP server and dynamic DNS services. Chapter 3, General Configuration describes how to configure NAT and firewall rules and the features associated with them. Chapter 4, Virtual Private Networking describes how to configure pfSense to serve any or all of the four major VPN implementations—IPSec, L2TP, OpenVPN, and PPTP. Chapter 5, Advanced Configuration covers advanced networking features such as configuring different types of virtual IP, creating gateways, and bridging interfaces. Chapter 6, Redundancy, Load Balancing, and Failover contains recipes explaining how to load-balance or failover the multi-WAN interfaces to protect large and sensitive systems.

pfSense是一個基於FreeBSD的開源防火牆發行版，提供了一個靈活且強大的路由和防火牆平台。pfSense的多功能性為我們提供了各種配置選項，相較於其他產品，這使得確定需求變得更加困難且更加重要。通過本書，您將看到pfSense提供了許多其他選擇，以滿足任何環境的安全需求。本書以食譜的形式教您如何在確定環境的安全需求後使用pfSense的功能。它涵蓋了從網絡接口和pfSense服務（如DHCP和動態DNS）的初始配置到實現故障轉移和負載平衡的複雜技術的所有內容。本書內容包括 第1章，初始配置，涵蓋了幾乎每個pfSense部署所需的設置，包括防火牆、路由器和無線接入點的設置。通過本章的食譜，您將學習如何安裝和配置具有完全運作的防火牆和路由器的pfSense。 第2章，基本服務，解釋了如何配置pfSense提供的基本網絡服務，如DHCP服務和動態DNS服務。 第3章，一般配置，描述了如何配置NAT和防火牆規則以及與它們相關的功能。 第4章，虛擬私有網絡，描述了如何配置pfSense以提供四種主要VPN實現（IPSec、L2TP、OpenVPN和PPTP）中的任何一種或全部。 第5章，高級配置，涵蓋了高級網絡功能，如配置不同類型的虛擬IP、創建網關和橋接接口。 第6章，冗餘、負載平衡和故障轉移，包含了解釋如何對多WAN接口進行負載平衡或故障轉移以保護大型和敏感系統的食譜。