🛡️ pfSense

🛡️ Network Segmentation and Service Configuration Lab with pfSense (Windows, Kali, Ubuntu)

This document covers the setup of a virtual lab environment using pfSense, Windows, Kali Linux, and Ubuntu Server to implement network segmentation, configure DHCP, DNS, and FTP services, and apply firewall rules. Each step is documented with relevant screenshots for clarity.

🌐 pfSense Installation and Initial Configuration 🖥️ Installation Steps

Download the pfSense ISO image. Launch the installation and complete the disk partitioning.

Important: Before rebooting, go to Devices > Optical Drives and unmount the ISO file. Otherwise, the installation process will restart. After a successful installation, you'll see the pfSense console interface.

Change the LAN IP address. Default pfSense LAN is typically set to 192.168.1.1, but you must adjust it according to your VirtualBox Host-Only Adapter subnet (e.g., 192.168.56.1) to gain web interface access.

🧱 LAN Segmentation & Topology Overview Three additional VMs are installed:

🪟 Windows 10

🐱 Kali Linux

🐧 Ubuntu Server

Each VM is attached to a separate Host-Only Adapter for network segmentation.

Start the pfSense VM and configure the newly added interfaces

🔌 VirtualBox Network Configuration Navigate to File > Preferences > Network > Host-Only Networks

Create 3 new Host-Only Adapters (one per VM)

Assign each adapter to a pfSense OPT interface

Start the pfSense VM and configure the newly added interfaces

🌍 Interface Definitions

Arayüz	Tanım	IP Adresi
WAN	NAT	Otomatik (DHCP)
LAN	HOST-ONLY	10.10.10.1

Access the pfSense web interface at https://10.10.10.1
Default credentials: Username: admin, Password: pfsense.

🧰 Ubuntu Server: DHCP, DNS, and FTP Configuration 🖥️ Set a Static IP (via Netplan)

sudo nano /etc/netplan/00-installer-config.yaml

Sample configuration (adjust interface name accordingly):

❗You should replace enp0s8 with your own network graph name. Using the 'ip a' command:

sudo netplan apply

📍 Ubuntu IP: `30.30.30.101/24` (Statik)

🔄 Configure DHCP Server

sudo apt update
sudo apt install isc-dhcp-server
sudo nano /etc/dhcp/dhcpd.conf

Edit DHCP configuration:

Set interface in:

sudo nano /etc/default/isc-dhcp-server

We check the DHCP service distribution and enter the interface names. INTERFACESv4="enp0s3" And we restart the DHCP service:

sudo systemctl restart isc-dhcp-server
sudo systemctl status isc-dhcp-server

🌐 Configure DNS (BIND9)

sudo apt install bind9

sudo nano /etc/bind/named.conf.options

Restart service:

sudo systemctl restart bind9

📁 FTP SERVER

sudo apt install vsftpd -y
sudo systemctl enable vsftpd
sudo adduser ftpuser (We create a username and password)

📄 Edit FTP configuration:

 sudo nano /etc/vsftpd.conf

Restart the service: sudo systemctl restart vsftpd

FTP access is defined for users.

ftp localhost

🔒 Firewall Rules and Access Controls

Rule	Status
LAN1 → OPT1	❌ Block
OPT1 -> LAN1	❌ Block
OPT1 → FTP(30.30.30.101)	❌ Block
LAN1 → FTP(30.30.30.101)	✅ Allow
All LANs → WAN	✅ Allow

✅ Only specific traffic is allowed to ensure segmented and secure communication. DHCP will automatically provide the ability to run and maintain the external network!

***Client Systems