====== pfSense firewall ======
  * 2026-09-01: pfSense is installed in Hua Hin (cerberus) and Flims (hygieia).

===== Access the firewall =====
  * If you are on location, connect your computer to the wired LAN with subnet 192.168.1.0, then enter one of the following urls in your browser:
    * ''https://cerberus:443''
    * ''https://hygieia:443''
    * ''https://192.168.1.1:443''
  * If you need to access the firewall through a remote connection:
    * you need to have access to linux on a linux PC, a Mac PC, or a Windows PC with WSL (Windows Subsystem for Linux) installed
    * you need to have access to the SSH private key for my current laptop
    * open a terminal window on linux, then establish a tunnel to the location you need access to with ''ssh -p <external_ssh_port> -i <ssh_private_key> -L 10443:192.168.1.1:443 your.location.tld''
    * enter the following url in your browser: ''https://localhost:10443''
  * The connection will not be trusted as there is no SSL certificate for localhost or cerberus or hygieia, but you can ignore the warning and accept the exception
  * Enter ''admin'' as username and your admin password

===== Documentation =====
  * [[https://docs.netgate.com/pfsense/en/latest/solutions/xg-7100/opt-lan.html#firewall-rules|Firewall Rules for BLUE and ORANGE]]
  * [[https://netosec.com/protect-home-network/|Protect home network using subnets with pfSense]]
  * [[https://docs.netgate.com/pfsense/en/latest/nat/port-forwards.html|Port Forwards]]