Tutorial: pfsense Port Forwarding [YouTube Release]

Additional Resources:

Netgate Documentation


Connecting With Us

Lawrence Systems Shirts and Swag

β–ΊπŸ‘• https://teespring.com/stores/lawrence-technology-services


Amazon Affiliate Store
:shopping_cart: Lawrence Systems's Amazon Page

Ubiquiti Affiliate
:shopping_cart: Ubiquiti Store USA – Ubiquiti Inc.

All Of Our Affiliates that help us out and can get you discounts!
:shopping_cart: Affiliates We Love - Lawrence Technology Services

Gear we use on Kit
:shopping_cart: Kit

Try ITProTV free of charge and get 30% off!
:shopping_cart: Learn technology and pass IT certifications with ITProTV

Use OfferCode LTSERVICES to get 10% off your order at
:shopping_cart: Tech Supply Direct | Shop Workstations, Servers, Storage, and More

Digital Ocean Offer Code
:shopping_cart: DigitalOcean – The developer cloud

HostiFi UniFi Cloud Hosting Service
:shopping_cart: HostiFi - UniFi Cloud Hosting

Protect you privacy with a VPN from Private Internet Access
:shopping_cart: Buy VPN with Credit Card or PayPal | Private Internet Access

:moneybag: lawrencesystems is creating Tech Tutorials & Reviews | Patreon

:stopwatch: Timestamps :stopwatch:
00:00 pfsense port forwarding
02:01 Demo Lab IP Setup
03:00 Creating Port Forwards
04:21 port forward range
05:10 NAT Reflection
07:23 using pftop to test portfoward
08:29 Restricting Port Forward Source IP
10:00 chaning rules with exiting connections
11:50 Alias ports forwards
13:25 Port Forward Multiple WAN IP
16:30 ICMP forwarding

Your video got me thinking about trying to secure my open ports. For example I have a few people I share my plex server with. I presume they have a dynamic IP address from their ISP. Is their a way to input their source address as an alias and have it update if their IP changes?

I would rather not use source IP addresses as a means for authentication (that is is basically what you are saying, if I understand things correctly).

As far as I’m concerned a VPN would be the preferred way here.

I have a vpn on my router (pfsense) that I can dial into my network from. How can I get their steaming device to use a vpn (roku and firestick)?