Could be something to do with your firewall rules or outgoing tab under NAT in pfSense. Do you have it set to manual or automatic?

That is done automatically when you install pfsense, change pfsense lan IP to be the network you want and there you go that would be natted to your public IP.

Your telnet to port 80 is likely going to squid, and then failing because squid can't get out (no default gateway).

Activate Default Gateway Switching under System > Advanced, Miscellaneous.

Answer my own forume ;)

This issue is solved by using Firewall Aliases & firewall Rules

Firewall Aliases & Firewall Rules
-  Firewall Aliases
-  IP > Add -
          Properties
                  Name = (Aliases Name)
                  Description =
                  Type = Host(s)

Host(s)
                  IP or FQDN = (Domain IP Address)
                  Description=

- Firewall Rules
    - Lan > Add
                (Leave everything else as normal except Destination)
                Destination =
                                    (Single host or Aliases)  /  (Aliases name)

- Advanced Options

- Gateway  ( Chose WAN interface)

Click save

Thank you all and a Big thanks to johnpoz  for the extra help

What's works. Thank you very much

Sounds like your getting your firewall when trying to get to a service via your public ip. You need to Set the nat reflection on the rule to Enable (Pure NAT)

Post screenshots of what you have done.

do you have limiter? it kills NAT reflection im sure that squid in transparent mode does not kill it unless its new on 2.3 im running on 2.2.4

Hello,

Thank you for your reply.

The fire wall rules are as follows:

With specified gateway:

Protocol: TCP/UDP, Source: vlan3098, Port: (meaning any from my understanding), Destination: * , Port: (of destination), Gateway WAN_PPOE, Que: none

With none specified:

Protocol: TCP/UDP, Source: vlan3098, Port: , Destination: * , Port: (of destination), Gateway *, Que: none

i have tried it both ways since posting and it still does not work for vlans only,
When setting up a normal interface it’s all working fine, hence why i am at a loss.

Please help if you can.

Thanks again.

Kr01c

Just as an update; this has fixed it. I assigned interfaces for all the different varieties of OpenVPN (dial-in, clients) and created explicit NAT rules for them, and voila it works. Thanks viragomann

I had plex working with pfsense on a clear connection to the Internet,  and even through the VPN.  Was able to watch movies on vacation on my Roku.

@CM350:

How do you shut this down in pfsense? I did not found this option?

Uninstall siproxd ?

Looks OK, though I've never personally done all those different ports in one alias before I don't know that it doesn't work as long as the destination and mapped ports are 1 for 1.

anyone?

DHU, crap….i cant believe that i missed that.

changed, and now it all works.

man i feel dumb ....thanks gentlemen!

If i read you right, then the pfSense is not the default gateway for your setup.
Whoever set this up, had to configure the outbound NAT to show the source as the pfSense, because otherwise the traffic back would not leave via the pfSense.