Pfsense several key settings in the DMZ

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/59/D1/wKioL1TqjUvDRtu_AAEYfciCrK0876.jpg "title=" Unnamed QQ screenshot20150223101101.jpg "alt=" Wkiol1tqjuvdrtu_aaeyfcicrk0876.jpg "/> is a typical DMZ network topology

PF1, you need to set up NAT reflection in the network address translation, System-Firewall/nat, for Port forwards mode: Pure NAT

Open the above settings, you can have the intranet directly with the domain name to access the server rack in the DMZ.

PF2, I'm the port that connects the DMZ to the WAN, the intranet is the LAN, then the NAT function is maintained, the device that accesses the DMZ, the original IP, or the intranet machine in the DMZ, IP is all WAN IP

Firewall, NAT, Outbound,disable outbound NAT rule generation (not outbound NAT rules)

Pfsense several key settings in the DMZ