Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Wrong port forwarding?

    Scheduled Pinned Locked Moved Firewalling
    7 Posts 2 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      exico
      last edited by

      Hello,

      Im pretty new to pfsense but the installation was very straightforward and i managed to setup everything except a little strange port forwarding.
      I followed some examples and guides on how to set it up but this particular rule is getting me mad.

      Before pfsense we had a FritzBox 7430 and the redirect was working.

      Now i setup the fritzbox to send all the traffic (Exposed Host aka DMZ) to the pfsense box and all the port forwarding rules that i setup seems to work except for this one.

      On the Fritzbox the was to redirect HTTP (port 80) to our little server on port 90 with a fixed IP (cannot use same port because there is a web server alredy on port 80 for the local network) and everything was working ok.

      I tried to set it up on pfsense [image1] and seems to do something but not what was before with the rule on the fritzbox. The correct page should be [image2] and what i get is [image3].

      Image1

      Image2

      Image3

      Any suggestion?

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        in your port forward you need to use dest wan address, not *

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • E
          exico
          last edited by

          Sorry i took so long.

          Unlucky this doesnt work either.

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            well then go through the troubleshooting doc
            https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting

            Post then you have questions.

            You sure you don't want it the other way around.  Http server is listening on 80, but you want to use a different port on your wan because your isp blocks 80 or something?  So your dest would be 90 and your nat would be 80

            Your error in your 3rd pic has nothing to do with a port forward.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • E
              exico
              last edited by

              Ok, i did some troubleshooting but nothing wor so far.

              From the docs this is what i checked:

              1. Seems good cause is forwarding something
              2. Enabled but port open, tested in local network and works
              3. Client is using pfsense as gateway
              4. Client is listening, works on local network and tested from Diagnostics on pfsense if the port on the client is open
              5. ISP is not blocking, work with just fritzbox and not with pfsense. Doesnt work either from the network between pfsense and the modem/router
              6. Local works, between pfsense and router not and from external ip neither
              7. Not sure about this, im no expert
              8. Border router has Exposed host set to pfsense.
              9. No captive portal
              10-11-12-13. Nop
              14. No gateway on rules
              15. UPnP is disabled

              Your error in your 3rd pic has nothing to do with a port forward.

              Guessed too but why it works on a normal router with nat and not on pfsense?

              You sure you don't want it the other way around.  Http server is listening on 80, but you want to use a different port on your wan because your isp blocks 80 or something?  So your dest would be 90 and your nat would be 80

              Im not using port 80 on the server because it has Windows remote web access on it and the program that is using port 90 is not managed by us, they installed it and configured on port 90.
              ISP is not blocking anything.

              Page works from LAN [192.168.10.x] but not from Ext or network before pfsense [192.168.11.x]
              Our network atm is like this:

              Ext IP -> fritzbox with exposed host (DMZ) [192.168.11.1] -> [192.168.11.2] PFsense WAN and PFsense LAN [192.168.10.1] (gateway, dhcp etc) -> Clients [192.168.10.x] and Server [192.168.10.250]

              I tried to forward port 90 on port 90 with the same result. 3rd pic. I also added https forward, just to be sure but timed out, no service i guess on this port on the server.

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                So is there a firewall on this machine that blocks access from non local networks for some aspect of your site?

                Your clearly getting to the site if your getting that error since that error says there is a problem with your sitehelper script on the C drive..  How exactly would you see such an error if the port forwarding was not working..

                Put a up a test page that says hey test page via html.. If that works then again that points to something wrong on our server..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • E
                  exico
                  last edited by

                  Hello there, i finally solved. The problem wasnt pfsense but settings in the windows server machine.

                  I just added a binding address in the web server configuration and voila.

                  Its really strange because it was working out of the box with the fritzbox NAT.

                  Thank you for your help  :D

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.