How To Set Up pfSense 2.1 for AirVPN

[masterchef 0]

i did the setup exactly, but i would like to limit access to web configuration only on the 192.168.1.1 interface, the interface which go directly on internet

now if i try to get web interface from the pc connected to 192.168.123.1 network card, i can see it. i do not like to have avaiable from that interface.

 

the reason is to harden, or to try to harden the firewall from every pc which goes in internet using vpn, and connected to 192.168.123.1 interface.

can you suggest me which rule to add?

 

second question

if i want to limit every way to attempt to hack the router from every of the three network interface (and access the router only from the serial port) what i can do?

 

because i did setup the router using 2.2.6 version, i would like to mantain this version, unless there are necessary reason to upgrade to 2.3(now i do not know good reason to upgrade), but il 2.2.6 works well i ask you to explain how to do what i asked in this setup

[Monkeh 0]

Hi

 

I have followed this great guide and have pfsense 2.3 working with airvpn 

 

But I have a server on my LAN which hosts an external webportal on port 19020 and I have been trying to configure forwarding for this port unsuccessfully,

 

My Setup is as follows

ISP Router 192.168.1.1  (Have tried setting 192.168.1.2 as DMZ and the ports are forwarded to 192.168.1.2)

 

Pfsense VM has 2 vNICS connected to 2 NICS

Pfsense WAN 192.168.1.2

PFsense LAN 192.168.0.3

 

Internal hosting Server 192.168.0.7, Ports are forwarded on AIRVPN website.

 

I have followed the guides and configured port forwarding, NAT and rules, but are unable to communicate with this port via the internet 

 

interfaces by special_xk, on Flickr
 

NAT by special_xk, on Flickr

NATout by special_xk, on Flickr

rules by special_xk, on Flickr

rules_wan by special_xk, on Flickr

 

filewall_aliases by special_xk, on Flickr

[go558a83nk 362]

@Monkeh, have you followed this guide, or the other guide for pfsense 2.3?  The guide for pfsense 2.3 is different from this one and I'm confident that port forwarding has been discussed in that long thread.

[helmax 2]

is possible guide for wireguard?

[Wolke68 5]