{"id":36,"date":"2024-02-13T05:00:00","date_gmt":"2024-02-13T05:00:00","guid":{"rendered":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/?p=36"},"modified":"2024-02-13T05:55:34","modified_gmt":"2024-02-13T05:55:34","slug":"configuring-the-dmz-in-opnsense-in-3-easy-steps","status":"publish","type":"post","link":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/","title":{"rendered":"Configuring the DMZ in OPNsense in 3 Easy Steps"},"content":{"rendered":"<div class=\"wp-block-image\">\n<figure class=\"alignleft size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/VirtualBox_Linux-Mint_12_02_2024_12_12_27-1024x576.png\" alt=\"\" class=\"wp-image-38\" style=\"width:418px;height:auto\" srcset=\"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/VirtualBox_Linux-Mint_12_02_2024_12_12_27-1024x576.png 1024w, https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/VirtualBox_Linux-Mint_12_02_2024_12_12_27-300x169.png 300w, https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/VirtualBox_Linux-Mint_12_02_2024_12_12_27-768x432.png 768w, https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/VirtualBox_Linux-Mint_12_02_2024_12_12_27-1536x864.png 1536w, https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/VirtualBox_Linux-Mint_12_02_2024_12_12_27-520x292.png 520w, https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/VirtualBox_Linux-Mint_12_02_2024_12_12_27-610x343.png 610w, https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/VirtualBox_Linux-Mint_12_02_2024_12_12_27.png 1920w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Now that we have set up the WAN and LAN networks, we should consider configuring the DMZ.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The DMZ (demilitarized zone), or screened subnet, is physical or logical subnetwork that exposes an organization\u2019s external-facing servers to the Internet. The purpose of the DMZ is to add an extra layer of security to a LAN. With a DMZ, an external node in the DMZ can only access hosts in the DMZ, while the rest of the network is hidden behind a firewall.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To configure the DMZ, three steps are necessary:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"\">Enabling the DMZ<\/li>\n\n\n\n<li class=\"\">Adding firewall rules to the DMZ<\/li>\n\n\n\n<li class=\"\">Testing the DMZ to confirm security<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">In this article, we will cover all three steps.<\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><strong>Enabling the DMZ<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In order to enable the DMZ (which is referred to as OPT1), do the following:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"\">Log into the web GUI.<\/li>\n\n\n\n<li class=\"\">On the left menu sidebar, click on <strong>Interfaces<\/strong>.<\/li>\n\n\n\n<li class=\"\">On the left menu sidebar, click on <strong>OPT1<\/strong>.<\/li>\n\n\n\n<li class=\"\">The OPT1 web page offers a number of different parameters:\n<ul class=\"wp-block-list\">\n<li class=\"\"><strong>Description<\/strong>: This is where you can enter a brief description<\/li>\n\n\n\n<li class=\"\"><strong>Block private networks\/Block bogon networks<\/strong>: Just as in the configuration page for WANs, you can prevent private addresses from being sent and prevent reserved and unassigned IP addresses from being sent. For most cases, these options should be left unchecked.<\/li>\n\n\n\n<li class=\"\"><strong>IPv4\/IPv6 Configuration Type<\/strong>: Unless you have an upstream DHCP server, you should select Static IPv4\/Static IPv6.<\/li>\n\n\n\n<li class=\"\"><strong>MAC Address<\/strong>: You can enter a different MAC address, which enables MAC spoofing.<\/li>\n\n\n\n<li class=\"\"><strong>MTU\/MSS\/Duplex and Speed<\/strong>: You can alter the maximum transmission unit (default is 1500), the maximum segment size (default is 536 for IPv4, 1220 for IPv6). You can also change the duplex and speed, from 10 Base T to 1000 Base T, and select between half and full duplex.<\/li>\n\n\n\n<li class=\"\"><strong>Static IPv4\/IPv6 Configuration<\/strong>: Since you selected static configuration, you must enter an IP address here. If you used 192.168.1.0\/24 for the LAN, you likely should enter 192.168.2.1 here for IPv4, and fd00:2::1 for IPv6.<\/li>\n\n\n\n<li class=\"\"><strong>IPv4\/IPv6 Upstream Gateway<\/strong>: This is for a separate upstream link; it should be left as Auto-detect.<\/li>\n\n\n\n<li class=\"\"><strong>Uses IPv4 connectivity<\/strong>: If IPv6 is supplied over a PPoE connection, you need to check this option.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li class=\"\">When you are done making changes, click on the Save button at the bottom of the page, then click Apply Changes at the top of the page. <\/li>\n<\/ul>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><strong>Adding Firewall Rules to the DMZ<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As of now, we have enabled and configured the DMZ interface. But the reason we added a DMZ was so front-facing servers could be exposed to the Internet, with all other nodes behind the firewall. But for that to happen, we must add firewall rules.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"\">On the left menu sidebar, click on <strong>Firewall<\/strong>.<\/li>\n\n\n\n<li class=\"\">On the left menu sidebar, click on <strong>Rules<\/strong>.<\/li>\n\n\n\n<li class=\"\">On the left menu sidebar, click on <strong>LAN<\/strong>.\n<ul class=\"wp-block-list\">\n<li class=\"\">There are two pre-defined rules to ensure that the LAN can interact with the Internet: the default \u201cAllow LAN to any\u201d rule and the default \u201cAllow LAN IPv6 to any\u201d rule. We need to clone these two rules for the DMZ (OPT1).<\/li>\n\n\n\n<li class=\"\">For the \u201cAllow LAN to any rule\u201d, click on the clone (depicted as two pieces of paper) icon to copy it. This rule should remain the same, with the following exceptions:\n<ul class=\"wp-block-list\">\n<li class=\"\">The <strong>Interface<\/strong> should be changed to <strong>OPT1<\/strong>.<\/li>\n\n\n\n<li class=\"\">The <strong>Source<\/strong> should be changed to <strong>OPT1 net<\/strong>.<\/li>\n\n\n\n<li class=\"\">The <strong>Description<\/strong> should be changed to \u201cDefault allow DMZ to any rule\u201d.<\/li>\n\n\n\n<li class=\"\">Click on the <strong>Save<\/strong> button on the bottom of the page to save the rule.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li class=\"\">For the \u201cAllow LAN IPv6 to any rule\u201d, again click on the clone icon to copy it. This rule should remain the same, with the following exceptions:\n<ul class=\"wp-block-list\">\n<li class=\"\">The <strong>Interface<\/strong> should be changed to <strong>OPT1<\/strong>.<\/li>\n\n\n\n<li class=\"\">The <strong>Source<\/strong> should be changed to <strong>OPT1 net<\/strong>.<\/li>\n\n\n\n<li class=\"\">The <strong>Description<\/strong> should be changed to \u201cDefault allow DMZ to any rule\u201d.<\/li>\n\n\n\n<li class=\"\">Click on the <strong>Save<\/strong> button at the bottom of the page to save the rule, then click on the <strong>Apply Changes<\/strong> button at the top of the page to reload the firewall rules.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li class=\"\">Now the DMZ can interact with the Internet, but the LAN still has to interact with the DMZ. We can make rules by cloning the default rules and making changes to them.<\/li>\n\n\n\n<li class=\"\">For the \u201cAllow LAN to any rule\u201d, click on the clone icon to copy it. This rule should remain the same, with the following exceptions:\n<ul class=\"wp-block-list\">\n<li class=\"\"><strong>Destination<\/strong> should be changed to <strong>OPT1<\/strong> net.<\/li>\n\n\n\n<li class=\"\"><strong>Description<\/strong> should be changed to \u201cAllow LAN to DMZ rule\u201d.<\/li>\n\n\n\n<li class=\"\">Click on the Save button at the bottom of the page to save the rule.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li class=\"\">For the Allow LAN IPv6 to any rule\u201d, again click on the clone icon to copy it. This rule should remain the same, with the following exceptions:\n<ul class=\"wp-block-list\">\n<li class=\"\"><strong>Destination<\/strong> should be changed to <strong>OPT1<\/strong> net.<\/li>\n\n\n\n<li class=\"\"><strong>Description<\/strong> should be changed to \u201cAllow LAN IPv6 to DMZ rule\u201d<\/li>\n\n\n\n<li class=\"\">.Click on the <strong>Save<\/strong> button at the bottom of the page to save the rule, then click on the <strong>Apply Changes<\/strong> button at the top of the page to reload the firewall rules. <br><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><strong>Test the Network to Confirm Security<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Now you have added the DMZ interface and the firewall rules so that the LAN can interact with the DMZ, but the DMZ cannot interact with the LAN. But we don\u2019t know whether it works or not until we add a node to both the LAN and the DMZ to test the network. To confirm that the network works, do the following:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"\">From the DMZ node, ping a server on the Internet. The ping should be successful.<\/li>\n\n\n\n<li class=\"\">From the LAN node, ping the DMZ node. The ping should be successful.<\/li>\n\n\n\n<li class=\"\">From the DMZ node, ping the LAN node. The ping should <em>not be successful<\/em>.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If all three criteria are met, then it looks like the network works, and you can begin deploying your Internet-facing servers. You should be aware that you will have to configure NAT and a firewall rule for each server, and you will likely have to test connectivity to the server as well. But by following these steps, you will have successfully deployed a DMZ\/screened subnet in OPNsense.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Now that we have set up the WAN and LAN networks, we should consider configuring the DMZ. The DMZ (demilitarized zone), or screened subnet, is physical&#46;&#46;&#46;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"nf_dc_page":"","footnotes":""},"categories":[3],"tags":[],"class_list":["post-36","post","type-post","status-publish","format-standard","hentry","category-confiiguration"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Configuring the DMZ in OPNsense in 3 Easy Steps - OPNsense Install<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Configuring the DMZ in OPNsense in 3 Easy Steps - OPNsense Install\" \/>\n<meta property=\"og:description\" content=\"Now that we have set up the WAN and LAN networks, we should consider configuring the DMZ. The DMZ (demilitarized zone), or screened subnet, is physical&#046;&#046;&#046;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/\" \/>\n<meta property=\"og:site_name\" content=\"OPNsense Install\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/DavidZientara\" \/>\n<meta property=\"article:published_time\" content=\"2024-02-13T05:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-02-13T05:55:34+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/VirtualBox_Linux-Mint_12_02_2024_12_12_27-1024x576.png\" \/>\n<meta name=\"author\" content=\"David Zientara\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DavidZientara\" \/>\n<meta name=\"twitter:site\" content=\"@DavidZientara\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Zientara\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/configuring-the-dmz-in-opnsense-in-3-easy-steps\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/configuring-the-dmz-in-opnsense-in-3-easy-steps\\\/\"},\"author\":{\"name\":\"David Zientara\",\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/#\\\/schema\\\/person\\\/6054d1da024a9c9b8d3cc4ff185d7f0b\"},\"headline\":\"Configuring the DMZ in OPNsense in 3 Easy Steps\",\"datePublished\":\"2024-02-13T05:00:00+00:00\",\"dateModified\":\"2024-02-13T05:55:34+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/configuring-the-dmz-in-opnsense-in-3-easy-steps\\\/\"},\"wordCount\":1015,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/configuring-the-dmz-in-opnsense-in-3-easy-steps\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/VirtualBox_Linux-Mint_12_02_2024_12_12_27-1024x576.png\",\"articleSection\":[\"Confiiguration\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/configuring-the-dmz-in-opnsense-in-3-easy-steps\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/configuring-the-dmz-in-opnsense-in-3-easy-steps\\\/\",\"url\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/configuring-the-dmz-in-opnsense-in-3-easy-steps\\\/\",\"name\":\"Configuring the DMZ in OPNsense in 3 Easy Steps - OPNsense Install\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/configuring-the-dmz-in-opnsense-in-3-easy-steps\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/configuring-the-dmz-in-opnsense-in-3-easy-steps\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/VirtualBox_Linux-Mint_12_02_2024_12_12_27-1024x576.png\",\"datePublished\":\"2024-02-13T05:00:00+00:00\",\"dateModified\":\"2024-02-13T05:55:34+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/configuring-the-dmz-in-opnsense-in-3-easy-steps\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/configuring-the-dmz-in-opnsense-in-3-easy-steps\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/configuring-the-dmz-in-opnsense-in-3-easy-steps\\\/#primaryimage\",\"url\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/VirtualBox_Linux-Mint_12_02_2024_12_12_27.png\",\"contentUrl\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/VirtualBox_Linux-Mint_12_02_2024_12_12_27.png\",\"width\":1920,\"height\":1080},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/configuring-the-dmz-in-opnsense-in-3-easy-steps\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Configuring the DMZ in OPNsense in 3 Easy Steps\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/#website\",\"url\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/\",\"name\":\"OPNsense Install\",\"description\":\"Installation and configuration of OPNsense DISCLAIMER: This is not the official OPNsense website.  OPNsense is an OSS project \u00a9 Deciso B.V. 2015-2024\",\"publisher\":{\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/#organization\",\"name\":\"OPNsense Install\",\"url\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/7Ro0MJbW_400x400-1.png\",\"contentUrl\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/7Ro0MJbW_400x400-1.png\",\"width\":400,\"height\":400,\"caption\":\"OPNsense Install\"},\"image\":{\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/DavidZientara\",\"https:\\\/\\\/x.com\\\/DavidZientara\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/#\\\/schema\\\/person\\\/6054d1da024a9c9b8d3cc4ff185d7f0b\",\"name\":\"David Zientara\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8e5a5894f0638648889c9c97c6d7fef3964d3f803174ea3b6b596d793614aecf?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8e5a5894f0638648889c9c97c6d7fef3964d3f803174ea3b6b596d793614aecf?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8e5a5894f0638648889c9c97c6d7fef3964d3f803174ea3b6b596d793614aecf?s=96&d=mm&r=g\",\"caption\":\"David Zientara\"},\"sameAs\":[\"http:\\\/\\\/opnsenseinstall.com\"],\"url\":\"https:\\\/\\\/pfsensesetup.com\\\/opnsenseinstall.com\\\/author\\\/david-zientara\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Configuring the DMZ in OPNsense in 3 Easy Steps - OPNsense Install","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/","og_locale":"en_US","og_type":"article","og_title":"Configuring the DMZ in OPNsense in 3 Easy Steps - OPNsense Install","og_description":"Now that we have set up the WAN and LAN networks, we should consider configuring the DMZ. The DMZ (demilitarized zone), or screened subnet, is physical&#46;&#46;&#46;","og_url":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/","og_site_name":"OPNsense Install","article_publisher":"https:\/\/www.facebook.com\/DavidZientara","article_published_time":"2024-02-13T05:00:00+00:00","article_modified_time":"2024-02-13T05:55:34+00:00","og_image":[{"url":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/VirtualBox_Linux-Mint_12_02_2024_12_12_27-1024x576.png","type":"","width":"","height":""}],"author":"David Zientara","twitter_card":"summary_large_image","twitter_creator":"@DavidZientara","twitter_site":"@DavidZientara","twitter_misc":{"Written by":"David Zientara","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/#article","isPartOf":{"@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/"},"author":{"name":"David Zientara","@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/#\/schema\/person\/6054d1da024a9c9b8d3cc4ff185d7f0b"},"headline":"Configuring the DMZ in OPNsense in 3 Easy Steps","datePublished":"2024-02-13T05:00:00+00:00","dateModified":"2024-02-13T05:55:34+00:00","mainEntityOfPage":{"@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/"},"wordCount":1015,"commentCount":0,"publisher":{"@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/#organization"},"image":{"@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/#primaryimage"},"thumbnailUrl":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/VirtualBox_Linux-Mint_12_02_2024_12_12_27-1024x576.png","articleSection":["Confiiguration"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/","url":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/","name":"Configuring the DMZ in OPNsense in 3 Easy Steps - OPNsense Install","isPartOf":{"@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/#primaryimage"},"image":{"@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/#primaryimage"},"thumbnailUrl":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/VirtualBox_Linux-Mint_12_02_2024_12_12_27-1024x576.png","datePublished":"2024-02-13T05:00:00+00:00","dateModified":"2024-02-13T05:55:34+00:00","breadcrumb":{"@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/#primaryimage","url":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/VirtualBox_Linux-Mint_12_02_2024_12_12_27.png","contentUrl":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/VirtualBox_Linux-Mint_12_02_2024_12_12_27.png","width":1920,"height":1080},{"@type":"BreadcrumbList","@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/configuring-the-dmz-in-opnsense-in-3-easy-steps\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/"},{"@type":"ListItem","position":2,"name":"Configuring the DMZ in OPNsense in 3 Easy Steps"}]},{"@type":"WebSite","@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/#website","url":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/","name":"OPNsense Install","description":"Installation and configuration of OPNsense DISCLAIMER: This is not the official OPNsense website.  OPNsense is an OSS project \u00a9 Deciso B.V. 2015-2024","publisher":{"@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/#organization","name":"OPNsense Install","url":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/#\/schema\/logo\/image\/","url":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/7Ro0MJbW_400x400-1.png","contentUrl":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-content\/uploads\/2024\/02\/7Ro0MJbW_400x400-1.png","width":400,"height":400,"caption":"OPNsense Install"},"image":{"@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/DavidZientara","https:\/\/x.com\/DavidZientara"]},{"@type":"Person","@id":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/#\/schema\/person\/6054d1da024a9c9b8d3cc4ff185d7f0b","name":"David Zientara","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/8e5a5894f0638648889c9c97c6d7fef3964d3f803174ea3b6b596d793614aecf?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8e5a5894f0638648889c9c97c6d7fef3964d3f803174ea3b6b596d793614aecf?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8e5a5894f0638648889c9c97c6d7fef3964d3f803174ea3b6b596d793614aecf?s=96&d=mm&r=g","caption":"David Zientara"},"sameAs":["http:\/\/opnsenseinstall.com"],"url":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/author\/david-zientara\/"}]}},"_links":{"self":[{"href":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-json\/wp\/v2\/posts\/36","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-json\/wp\/v2\/comments?post=36"}],"version-history":[{"count":1,"href":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-json\/wp\/v2\/posts\/36\/revisions"}],"predecessor-version":[{"id":39,"href":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-json\/wp\/v2\/posts\/36\/revisions\/39"}],"wp:attachment":[{"href":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-json\/wp\/v2\/media?parent=36"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-json\/wp\/v2\/categories?post=36"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pfsensesetup.com\/opnsenseinstall.com\/wp-json\/wp\/v2\/tags?post=36"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}