pfSense web hosting template firewall rules

[chilipepperz]

I did a search on here but I didn't see it. Does anyone have a pfSense template for if you're running Drupal or a similar CMS, MySQL and services like that? I want to put two servers and one pfSense into a datacenter.

I think I will need the following services open:

• http,
• https,
• SSH,
• ftp,
• OpenVPN,
• VNC,
• RDP,
• SNMP?,
• SMTP?

Does anyone have a pre-made template for this? If not, do I really just need to block all in pfSense as a final rule and put the above set into Firewall > Rules > WAN?

• http, IPv4 + IPv6 TCP/UDP Pass
• https, IPv4 + IPv6 TCP/UDP Pass
• SSH, IPv4 + IPv6 TCP/UDP Pass
• ftp, IPv4 + IPv6 TCP/UDP Pass
• OpenVPN 1194-1196 (assuming I need 1194, 1195 and 1196 for different VPNs), IPv4 + IPv6 TCP/UDP Pass
• VNC, IPv4 + IPv6 TCP/UDP Pass
• RDP, IPv4 + IPv6 TCP/UDP Pass
• SNMP?, IPv4 + IPv6 TCP/UDP Pass
• SMTP? IPv4 + IPv6 TCP/UDP Pass
• IPv4 + IPv6 ALL ALL Block

Is that really all there is to it? Is there a pre-made template? Would I need suricata or snort if I had this setup?