@wilfrid thank you , its work

Ok, I figured it out. The issue was not with my configuration, that was all good. But my hoster (Hetzner) is routing additional IP addresses by default through my main IP. This was not wrong for my scenario. I got a separate /29 subnet instead a single IP which can be routed through my second IP that I use for pfSense. Virtual IPs of that subnet work perfectly. Thanks anyway!

@samto I found a root cause of the problem. It is well described here: https://www.everythingcli.org/ssh-tunnelling-for-fun-and-profit-tunnel-options/ So, the combination ssh -f -T -N -R works fine

@georgecz58 Not clear, what you really try to achieve. Maybe you can provide a drawing?

@rajesh-0 Use sftp if you can, it only uses a single port. Better still set up a VPN on your router.

Well your outbound nat if set to automatic should auto do natting for your 3 different wans. You could pick which one is use for what via policy routing. https://docs.netgate.com/pfsense/en/latest/multiwan/policy-route.html

@n3xus_x3 said in Multicast: I use multicast for IPTV reception there are still 2 - 3 pieces of SG300-10 in our (AoIP system + multicast) system,... yet how can I help? describe it exactly BTW: IPTV in this regard, is deadly, ISP dependent...

As I did a quick visit the last weekend with our youngest in D2 I can't find any problem even when not having pure NAT. We've played with two PS4s with both NAT Type 2 (not strict/3 but not pure/1 either) without a hitch. Got together, got into PvE/PvP - don't see problems.

If your going to create a port forward to rdp. The destination would be your wan address on port 3390 The redirect IP would be the IP you want to send it to, and the port 3389 (rdp). Keep in mind that rdp can and wants to use UDP as well. Also - the windows firewall out of the box would block all access to rdp from anything other than its local network. you would have to allow for this. And again I will warn against opening rdp to the public - it is a HORRIBLE idea, Horrible. Even if you change the port. If you did need to do it for some sort of remote help.. Lock down the source to the known IP, or atleast the known network IP range that will be using it. The secure method of rdp to stuff on your network from remote is vpn.

@adb Glad it worked for you :)

I would highly recommend you do not forward RDP, even if using a different port like 3390.. If you want to RDP to your stuff while your remote - secure method is VPN..

@sumenair Yes, you can do that. That will work if you set the local and remote network correctly in the OpenVPN settings.

@viragomann Okay I think im getting somewhere with this using a vlan. Iv set it up. Havent assigned anything to that vlan yet but I still have internet so that's a good sign. I might try again with a single LAN just to see.

Not sure if possible with udp.. And have never tried it with tcp either.. It is listed as an option, but not sure on the details of that option. We can call in maybe @Derelict he would have better understanding here of these options. I would think ;)

@jacquesh said in webrtc: basically, anything but Symmetric NAT I found this yet, pls. read Jimp's response (second answer) about symmetric NAT, so you're not in a good position,.... https://forum.netgate.com/topic/57370/symmetric-nat -a correct description of the VMS is required to assign static ports (I would ask this from the vms developers) -or as I suggested 1: 1NAT

check this out, it is a really easy way to get your DLNA server reachable though your VPN connection https://youtu.be/dx2gHOnEpo4

@viragomann ok so delete the lan rule and on the wan rule just enable the nat refelction. Ill try that then. Mat

@derelict Dumb fix fixed it, had to remake the NAT rules for whatever reason.