Table of Contents

PFSense - Install pfSense - Create Firewall Aliases

Create a few aliases which we will use in the creation of the firewall rules later.

These simplify the job of making changes in future especially as we add more interfaces and functionality to our network.


Define Alias for Local Subnets

Create an alias to define the internal subnet we are using.

Navigate to Firewall → Aliases → IP.

Click Add.

Click Save.

NOTE: Other local subnets could also be included if they are used such as:

  • 10.0.0.0/8
  • 172.16.0.0/12

Define Alias for Printers

Create an alias to define the printers we are using.

Navigate to Firewall → Aliases → IP.

Click Add.

Click Save.

NOTE: This alias will be used in firewall rules to grant users of other VLANs access to the Printers:


The other aliases below here still need to be worked out properly, so ignore for now.


Define Alias for Ubiquiti

Navigate to Firewall → Aliases → Ports.

Click Add.

Click Save.


Click Add.

Click Save.


Define Alias for Plex

Navigate to Firewall → Aliases → Ports.

Click Add.

Click Save.


Click Add.

Click Save.


Define Alias for Chromecast Ports

Navigate to Firewall → Aliases → Ports.

Click Add.


Click Add.

  • Allow both TCP ports 8008 and 8009 outbound to the Chromecast device.
  • Allow high UDP ports both incoming and outgoing. “High ports” are the local ports usually ranging 32768-61000.
  • Allow the special SSDP packets outbound (which is UDP traffic to the multicast IP 239.255.255.250, destination port 1900) which is used to check for other Google devices in the same network. Google devices reply with the Source IP to this packet.

See: https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-6/chromecastDG76/ChromecastDG76.html

See: https://help.ui.com/hc/en-us/articles/360001004034-UniFi-Best-Practices-for-Managing-Chromecast-Google-Home-on-UniFi-Network


Define Alias for FTPes Ports

Navigate to Firewall → Aliases → Ports.

Click Add.


Define Alias for Other Ports allowed to communicate between internal subnets

Create a list of ports to define what traffic is permitted to traverse between local subnets.

Navigate to Firewall → Aliases → Ports.

Click Add.

Click Save.

NOTE: You will need to amend this alias as per your own networks requirements, but this should get you started.

To better understand what needs you have, enable firewall logging and review the firewall logs which will illustrate which ports are being used or blocked.


Define Alias for Ports allowed to access the internet

Navigate to Firewall → Aliases → Ports.

Click Add.

Click Save.

NOTE: You will need to amend this alias as per your own networks requirements, but this should get you started.

To better understand what needs you have, enable firewall logging and review the firewall logs which will illustrate which ports are being used or blocked.


Return to Install pfSense or continue to Create Firewall Rules.