Uploaded January 2022 | Updated September 2026, 2 weeks ago
pfSense port forwarding is super easy to setup and configure but as always, port forwarding has its risks. If all you are trying to achieve is remote access from outside into your network, consider using VPN.
Much like in my previous video about port forwarding in Ubiquiti UniFi, the same concepts apply in pfSense. Port forwarding is supposed to be used in very specific use cases and if possible avoided all together.
In this pfSense port forwarding we are also going over a method to create port forwarding rules while limiting the sources that are allowed to go through them. in pfSense its called "aliases" and they allow us to configure groups of ip addresses or even groups of ports. these aliases can then be used inside port forwarding rules and also in firewall rules.
pfSense port forwarding allows reaching inside your you network from the outside but remember, if you are not using port forwarding safely, whatever you open for yourself, will also be open for everyone else. I also recommend to use Snort or Suricata on your pfSense instance because these might help block known malicious ip addresses from reaching your internal network.
I created a video about configuring Snort in pfSense so if you haven't done so already, definitely give that video a watch: youtu.be/12u_chrgIKI
#pfSense #Firewall #Security
Video Index:
0:00 Intro
1:45 Creating port forward rules
3:45 Testing the port forwarding rule
5:38 Creating an alias
6:34 Using the alias inside a rule
7:35 Summary
pfSense port forwarding is super easy to setup and configure but as always, port forwarding has its risks. If all you are trying to achieve is remote access from outside into your network, consider using VPN.
Much like in my previous video about port forwarding in Ubiquiti UniFi, the same concepts apply in pfSense. Port forwarding is supposed to be used in very specific use cases and if possible avoided all together.
In this pfSense port forwarding we are also going over a method to create port forwarding rules while limiting the sources that are allowed to go through them. in pfSense its called "aliases" and they allow us to configure groups of ip addresses or even groups of ports. these aliases can then be used inside port forwarding rules and also in firewall rules.
pfSense port forwarding allows reaching inside your you network from the outside but remember, if you are not using port forwarding safely, whatever you open for yourself, will also be open for everyone else. I also recommend to use Snort or Suricata on your pfSense instance because these might help block known malicious ip addresses from reaching your internal network.
I created a video about configuring Snort in pfSense so if you haven't done so already, definitely give that video a watch: youtu.be/12u_chrgIKI
#pfSense #Firewall #Security
Video Index:
0:00 Intro
1:45 Creating port forward rules
3:45 Testing the port forwarding rule
5:38 Creating an alias
6:34 Using the alias inside a rule
7:35 Summary
