Best practice for limiting FreeNAS access to internal LAN only

[tundelas]

Hi All,

As the title suggests.. I'm looking for the best practice for securing my FreeNAS box to only be accessed by PCs on the internal LAN. I've been told to place it inside the DMZ (which does not make sense to me, need some clarity on there). I've also been told to use two routers in my setup, but I'm also not sure how that would work. Please help. Thanks in advance.

 

[HolyK]

Just make firewall rules and you are fine.

Example of your network:
Network: 192.168.10.0/24
Gateway (router): 192.168.10.1
NAS: 192.168.10.2
Workstations: 192.168.10.3 - 192.168.10.20

So firewall rule will be like:
Allow src-nat 192.168.10.0/24
Deny/Drop rest of the incoming connections

Result:
Anyone from your subnet will be able to access NAS
No one outside your subnet will be able to access NAS

How to set:
http://www.freebsd.org/doc/en/articles/linux-users/firewall.html