{"id":856,"date":"2019-07-23T09:28:05","date_gmt":"2019-07-23T15:28:05","guid":{"rendered":"https:\/\/ugit.siua.ac.cr\/?p=856"},"modified":"2019-09-25T14:23:33","modified_gmt":"2019-09-25T20:23:33","slug":"pfsense-proxy-reverso","status":"publish","type":"post","link":"https:\/\/sada.services\/?p=856","title":{"rendered":"PFSENSE: Proxy Reverso"},"content":{"rendered":"\n<ol class=\"wp-block-list\"><li>El primer paso es instalar el paquete SQUID proxy y activarlo<\/li><\/ol>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"616\" height=\"462\" src=\"\/wp-content\/uploads\/2019\/07\/1-8.png\" alt=\"\" class=\"wp-image-857\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/1-8.png 616w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/1-8-300x225.png 300w\" sizes=\"(max-width: 616px) 100vw, 616px\" \/><\/figure><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"blob:http:\/\/desarrollo.siua.ac.cr\/43f72a28-f7b5-4b31-9079-184ec3468e49\" alt=\"\"\/><\/figure>\n\n\n\n<p>En nuestro caso ya lo tenemos instalado<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"410\" src=\"\/wp-content\/uploads\/2019\/07\/2-6-1024x410.png\" alt=\"\" class=\"wp-image-858\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/2-6-1024x410.png 1024w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/2-6-300x120.png 300w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/2-6-768x307.png 768w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/2-6.png 1219w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Ahora debemos activar el servicio del proxy<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"195\" height=\"723\" src=\"\/wp-content\/uploads\/2019\/07\/3-5.png\" alt=\"\" class=\"wp-image-859\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/3-5.png 195w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/3-5-81x300.png 81w\" sizes=\"(max-width: 195px) 100vw, 195px\" \/><\/figure><\/div>\n\n\n\n<p>Activamos el servicio Proxy para que se habilite el proxy reverso<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"755\" height=\"453\" src=\"\/wp-content\/uploads\/2019\/07\/4-5.png\" alt=\"\" class=\"wp-image-860\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/4-5.png 755w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/4-5-300x180.png 300w\" sizes=\"(max-width: 755px) 100vw, 755px\" \/><\/figure>\n\n\n\n<p>NOTA: OJO con la interfaz donde se activa el proxy, podr\u00eda bloquear todo el trafico en dicha interfaz<\/p>\n\n\n\n<p>2.  Antes de configurar el proxy reverso debemos hacer un paso previo en la  configuraci\u00f3n del sistema de PFsense esto para que nos permita usar los  puerto por debajo de 1023 ya que por defecto vienen reservados y no nos  permitir\u00e1 usar los puerto 80\/443 en el proxy reverso, para solucionarlo  hacemos lo siguiente<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"269\" height=\"362\" src=\"\/wp-content\/uploads\/2019\/07\/5-4.png\" alt=\"\" class=\"wp-image-861\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/5-4.png 269w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/5-4-223x300.png 223w\" sizes=\"(max-width: 269px) 100vw, 269px\" \/><\/figure><\/div>\n\n\n\n<p>Vamos a configuraci\u00f3n avanzada del sistema y luego a System tunables, en donde deberemos buscar la variable net.inet.ip.portrange.reservedhigh, y setearla a 0, si no existe como fue en nuestro caso debemos creala<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"361\" src=\"\/wp-content\/uploads\/2019\/07\/6-6-1024x361.png\" alt=\"\" class=\"wp-image-862\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/6-6-1024x361.png 1024w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/6-6-300x106.png 300w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/6-6-768x271.png 768w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/6-6.png 1159w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"777\" height=\"431\" src=\"\/wp-content\/uploads\/2019\/07\/7-5.png\" alt=\"\" class=\"wp-image-863\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/7-5.png 777w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/7-5-300x166.png 300w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/7-5-768x426.png 768w\" sizes=\"(max-width: 777px) 100vw, 777px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"314\" src=\"\/wp-content\/uploads\/2019\/07\/8-4-1024x314.png\" alt=\"\" class=\"wp-image-864\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/8-4-1024x314.png 1024w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/8-4-300x92.png 300w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/8-4-768x235.png 768w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/8-4.png 1192w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>2. Asignar una IP virtual a la interfaz donde se va habilitar el proxy reverso<\/p>\n\n\n\n<p>Crear IP virtual<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"269\" height=\"318\" src=\"\/wp-content\/uploads\/2019\/07\/9-4.png\" alt=\"\" class=\"wp-image-865\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/9-4.png 269w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/9-4-254x300.png 254w\" sizes=\"(max-width: 269px) 100vw, 269px\" \/><\/figure><\/div>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"255\" src=\"\/wp-content\/uploads\/2019\/07\/10-3-1024x255.png\" alt=\"\" class=\"wp-image-866\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/10-3-1024x255.png 1024w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/10-3-300x75.png 300w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/10-3-768x191.png 768w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/10-3.png 1168w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"701\" src=\"\/wp-content\/uploads\/2019\/07\/11-3-1024x701.png\" alt=\"\" class=\"wp-image-867\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/11-3-1024x701.png 1024w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/11-3-300x205.png 300w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/11-3-768x526.png 768w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/11-3.png 1166w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"335\" src=\"\/wp-content\/uploads\/2019\/07\/12-3-1024x335.png\" alt=\"\" class=\"wp-image-868\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/12-3-1024x335.png 1024w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/12-3-300x98.png 300w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/12-3-768x252.png 768w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/12-3.png 1163w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li>Ahora entramos al servicio Proxy Reverso<\/li><\/ul>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"214\" height=\"751\" src=\"\/wp-content\/uploads\/2019\/07\/13-3.png\" alt=\"\" class=\"wp-image-869\"\/><\/figure><\/div>\n\n\n\n<p>Primeramente escogemos la interfaz donde queremos que escuche el servicio proxy reverso, en este caso la interfaz WAN de CABLETICA, Podemos si queremos definir la IP donde queremos que este servicio escuche, para ello debemos de crear previamente un Virtual IP a la interfaz en la secci\u00f3n de Firewall de pfsense, como se hizo en el paso anterior. Usamos la IP virtual para que escuche el proxy, le damos un FQDN al servidor, damos check a reset todas las conexiones TCP si la solicitud no es autorizada, y activamos el proxy inverso en el puerto 80 para el trafico HTTP, para el puerto 443 y trafico HTTPS se har\u00e1 posteriormente.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"685\" src=\"\/wp-content\/uploads\/2019\/07\/14-3-1024x685.png\" alt=\"\" class=\"wp-image-870\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/14-3-1024x685.png 1024w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/14-3-300x201.png 300w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/14-3-768x514.png 768w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/14-3-120x80.png 120w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/14-3.png 1177w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li>Ahora vamos a indicar cual o cuales servidores internos van a ser accesados p\u00fablicamente por medio del proxy reverso,<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"374\" src=\"\/wp-content\/uploads\/2019\/07\/15-3-1024x374.png\" alt=\"\" class=\"wp-image-871\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/15-3-1024x374.png 1024w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/15-3-300x109.png 300w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/15-3-768x280.png 768w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/15-3.png 1159w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"769\" height=\"625\" src=\"\/wp-content\/uploads\/2019\/07\/16-3.png\" alt=\"\" class=\"wp-image-872\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/16-3.png 769w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/16-3-300x244.png 300w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/16-3-768x624.png 768w\" sizes=\"(max-width: 769px) 100vw, 769px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"406\" src=\"\/wp-content\/uploads\/2019\/07\/17-3-1024x406.png\" alt=\"\" class=\"wp-image-873\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/17-3-1024x406.png 1024w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/17-3-300x119.png 300w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/17-3-768x304.png 768w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/17-3.png 1083w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li>Cremos un Mapping para este servidor interno<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"869\" height=\"817\" src=\"\/wp-content\/uploads\/2019\/07\/18-3.png\" alt=\"\" class=\"wp-image-874\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/18-3.png 869w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/18-3-300x282.png 300w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/18-3-768x722.png 768w\" sizes=\"(max-width: 869px) 100vw, 869px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"399\" src=\"\/wp-content\/uploads\/2019\/07\/19-3-1024x399.png\" alt=\"\" class=\"wp-image-875\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/19-3-1024x399.png 1024w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/19-3-300x117.png 300w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/19-3-768x299.png 768w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/19-3.png 1156w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>6. Por ultimo debemos de crear las reglas necesarias en el firewall para la interfaz CABLETICA_75MBPS, en nuestro caso vamos a permitir el acceso al puertos 80\/443 (Alias de puertos llamado Puertos_Web), y los pines a la IP Virtual 186.15.227.78<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"507\" src=\"\/wp-content\/uploads\/2019\/07\/20-3-1024x507.png\" alt=\"\" class=\"wp-image-876\" srcset=\"https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/20-3-1024x507.png 1024w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/20-3-300x149.png 300w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/20-3-768x380.png 768w, https:\/\/sada.services\/wp-content\/uploads\/2019\/07\/20-3.png 1163w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Configuraci\u00f3n de Proxy Reverso<\/p>\n","protected":false},"author":2,"featured_media":2082,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[50],"tags":[39],"class_list":["post-856","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-pfsense","tag-pfsense"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":6}},"_links":{"self":[{"href":"https:\/\/sada.services\/index.php?rest_route=\/wp\/v2\/posts\/856","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sada.services\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sada.services\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sada.services\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/sada.services\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=856"}],"version-history":[{"count":1,"href":"https:\/\/sada.services\/index.php?rest_route=\/wp\/v2\/posts\/856\/revisions"}],"predecessor-version":[{"id":878,"href":"https:\/\/sada.services\/index.php?rest_route=\/wp\/v2\/posts\/856\/revisions\/878"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sada.services\/index.php?rest_route=\/wp\/v2\/media\/2082"}],"wp:attachment":[{"href":"https:\/\/sada.services\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=856"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sada.services\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=856"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sada.services\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=856"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}