ok fixed it with port mapping. Now everything works.

You can't do NAT reflection with 1:1 IPs on 1.2.3.

You can do it on 2.0 though.

You'll have to ensure that your local systems only access the servers by their private IPs.

bump.

Yes i did, it som how got to work to night after i reinstalled the firewall… wired.
Still running from the same public IP address så i don´t think it is the IP thats blocked in the other end.

You may want to search the forum for "NAT reflection".

This problem happen because ethernet device in virtual machine can not enable promiscous mode! :D

KPA, +1.

You cannot do NAT on a bridge.

Done and done. Thanks for the help guys.

Actually, if you put a gateway on the OPT interface settings, it may get NAT applied since it is then considered a WAN-type interface.

But it's easy to get around that by doing as GruensFroeschli said: enable Manual Outbound NAT (AON), and make sure you do not have a rule set there for the OPT interface.

I figured it out I needed to uncheck the box that disables NAT Reflection at the bottom of System–>General Setup seems to work fine now

Hi,
I have a problem, i cant access website from inside LAN but can access if I use outside internet. I have assigned one of the Virtual ip with all ports forwarded to a single ip. but internal access to that ip with public ip is not working. I read forum and unchek disable NAT reflection also with no luck.Can u help me?

@tommyboy180:

What game is this, is I may ask?

He says it was Guilty Gear.

Update. My son has this working to some extent and is able to play the game against an on-line opponent. It may be that he just wasn't familiar with the game and needed to select an 'active' session to connect to. Can't say for sure as he mucked around in my pfSense while I was at work.

Hard to say as when I do the GRC ShieldsUp test it shows it as Stealth right now.

I don't do gaming or on-line sessions of this type so don't understand what's needed.

Thanks to all for your help.

Yes, otherwise it has no idea where to send packets for the subnet.

OK - No big deal.  I'm actually creating my own firewall rule so I guess it wouldn't matter but I'll just manually create the NAT routing.

Thanks for the help!

have you configured Asterisk for NAT? (sip_nat.conf i think)

Add another outbound nat rule that has interface set to DMZ, source address and port set to any, destination address set to the ip address of the webserver on the DMZ and destination port set to 80.

That's policy NAT, you can do that in 2.0.