Get the App
SLTechnology News&Howtos  ›  Network Security  › 

Add Intranet Penetration Service (frps) to pfsense

Shulou Source: shulou.com Published: 2022-06-01 06:18:24 10月04日 Update

I. cause

1. There is no public network IP at home, so it is not convenient to manage the equipment in the home.

2. The reason for using pfsense is that there is a public network address, and I have thought of using SSH tunnel to forward it, because it is convenient for openwrt routers to have frp client.

II. System version

1. Use version: pfsense2.3.5 (32-bit version)

2. Download address of frp package, download the version of your own system (frp_0.27.0_freebsd_386.tar.gz)

Https://github.com/fatedier/frp/releases III. Specific operation

1. Decompress the software package to get the following files

2. Upload frps and frps_full.ini to pfsense firewall corresponding directory through winscp

/ usr/local/bin/frps/usr/local/etc/frps/frps_full.ini

3. Set the execution permission

Chmod + x / usr/local/bin/frps

4. Write a boot script and create a script file

Touch autorun-frps.sh

5. Write the following code (the most important thing is the last line, fill in according to the path of uploading the file)

#! / bin/sh#autorun frps#2019-05-25/usr/local/bin/frps-c / usr/local/etc/frps/frps_full.ini &

6. Place the script in the

/ usr/local/etc/rc.d

7. Set file permissions

Chmod 755 autorun-frps.sh

(there is a pit here, and the permission is 755, otherwise it cannot be run)

8. Open the frps port

The main ports are 7000, 7001, 7500, 80,443, according to their own needs.

IV. Verification

1. View the operation of frps service

Sockstat | grep frps

2. Manage the panel access test

Http://hostname:7500

Username and password admin, admin, which can be modified in the configuration file.

Remarks

1. Pfsense needs to open the terminal, located in system > advanced

2. Use the system administrator account

# Exchange group number: 891815109

Tags: Files permissions versions systems scripts administration addresses ports software packages public networks runs services important easy one line code location reasons available in Apple Docker Huawei Linux macOS MariaDB Microsoft MySQL NVidia OPPO Reno Xiaomi OPPO Reno Apple Shulou Tech Info Shulou Technology