Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Firewall will forward RDP but not anything else

    Firewalling
    3
    19
    596
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      NotJohn
      last edited by

      I am trying to open the port for minecraft which is 25565 and am having some struggles with getting my NAT to forward the port. I have done the exact same process for MS RDP and followed the official pfSense guide to port forwarding and it opens the RDP port but not the minecraft port.

      Things I have done to try to help this:
      Duplicated the rule and port forward of the working port and changed the numbers
      opened my pcs firewall to allow all ports.
      Reinstalled pfSense all together and started from a clean build.
      recreated a 1-1 rule one step at a time with the working port and the minecraft port after
      deleting both, the rdp port still works
      Opening other ports to try a different port number
      bashed my head into my keyboard (the most effective so far)

      I can supply screenshots i just need to know what for and any other info y'all may need to assist. This is frustrating considering I had it working before and suddenly it stopped working at some undetermined time.

      Bob.DigB 1 Reply Last reply Reply Quote 0
      • Bob.DigB
        Bob.Dig LAYER 8 @NotJohn
        last edited by

        @notjohn Why have you opened the RDP-port? Bad idea to begin with.
        Maybe a dedicated firewall isn't the right tool for you anyway.

        N 1 Reply Last reply Reply Quote 0
        • N
          NotJohn @Bob.Dig
          last edited by

          @bob-dig use it for work purposes but understand the implications. Judgement on my decisions unrelated to the post probably isn't what's meant to be here.

          M 1 Reply Last reply Reply Quote 0
          • M
            michmoor LAYER 8 Rebel Alliance @NotJohn
            last edited by michmoor

            @notjohn Have you allowed RDP through firewall rules?
            If so do you see that rule being hit in the system log?
            Provide screenshots.

            Firewall: NetGate,Palo Alto-VM,Juniper SRX
            Routing: Juniper, Arista, Cisco
            Switching: Juniper, Arista, Cisco
            Wireless: Unifi, Aruba IAP
            JNCIP,CCNP Enterprise

            N 1 Reply Last reply Reply Quote 0
            • N
              NotJohn @michmoor
              last edited by

              @michmoor I dont see the rule being hit on my system log but i can rdp into my public IP so its open and i can scan to see that its open

              M 1 Reply Last reply Reply Quote 0
              • M
                michmoor LAYER 8 Rebel Alliance @NotJohn
                last edited by

                @notjohn When you scan for 25565, is it open? If its not then there is a good chance you have no firewall rule for it.

                Firewall: NetGate,Palo Alto-VM,Juniper SRX
                Routing: Juniper, Arista, Cisco
                Switching: Juniper, Arista, Cisco
                Wireless: Unifi, Aruba IAP
                JNCIP,CCNP Enterprise

                N 1 Reply Last reply Reply Quote 0
                • N
                  NotJohn @michmoor
                  last edited by

                  @michmoor 95660958-b4d2-4bdc-a9a2-90821f7828a0-image.png

                  But i do
                  d21e7d68-d2c3-4373-a2a1-0c7194fb4f8f-image.png

                  They match perfectly

                  N 1 Reply Last reply Reply Quote 0
                  • N
                    NotJohn @NotJohn
                    last edited by

                    @notjohn
                    and this shows what im seeing when i check the port
                    043224ae-1344-4023-a50c-1f8eb8d2db4a-image.png
                    but then 25565
                    4f2af091-7183-4595-b2a6-1a4dc782ddcf-image.png

                    same thing happens when using a 3rd party tester

                    M 1 Reply Last reply Reply Quote 0
                    • M
                      michmoor LAYER 8 Rebel Alliance @NotJohn
                      last edited by

                      @notjohn ahhhhh ok the last screen shot is the one i like
                      Doesnt seem that port 25565 is open on the server.

                      On the server run the following
                      netstat -ano | findstr 25565

                      If the port is listening my second question is do you have Windows Firewall enabled.

                      Firewall: NetGate,Palo Alto-VM,Juniper SRX
                      Routing: Juniper, Arista, Cisco
                      Switching: Juniper, Arista, Cisco
                      Wireless: Unifi, Aruba IAP
                      JNCIP,CCNP Enterprise

                      N 2 Replies Last reply Reply Quote 0
                      • N
                        NotJohn @michmoor
                        last edited by

                        @michmoor i turned off my windows firewall to solve this and it has not been turned back on yet

                        M 1 Reply Last reply Reply Quote 0
                        • M
                          michmoor LAYER 8 Rebel Alliance @NotJohn
                          last edited by michmoor

                          @notjohn
                          On the server run the following
                          netstat -ano | findstr 25565

                          Is the port listening?

                          edit: Turning off windows firewall resolved this?

                          Firewall: NetGate,Palo Alto-VM,Juniper SRX
                          Routing: Juniper, Arista, Cisco
                          Switching: Juniper, Arista, Cisco
                          Wireless: Unifi, Aruba IAP
                          JNCIP,CCNP Enterprise

                          1 Reply Last reply Reply Quote 0
                          • N
                            NotJohn @michmoor
                            last edited by

                            @michmoor
                            33906774-cce5-4d8f-aa83-0cddad48b580-image.png

                            M 1 Reply Last reply Reply Quote 0
                            • M
                              michmoor LAYER 8 Rebel Alliance @NotJohn
                              last edited by

                              @notjohn you execute the command on your Windows box - the same one you have RDP enabled on.

                              Firewall: NetGate,Palo Alto-VM,Juniper SRX
                              Routing: Juniper, Arista, Cisco
                              Switching: Juniper, Arista, Cisco
                              Wireless: Unifi, Aruba IAP
                              JNCIP,CCNP Enterprise

                              N 1 Reply Last reply Reply Quote 0
                              • N
                                NotJohn @michmoor
                                last edited by

                                @michmoor so i need to run this directly on the server's shell?

                                M 1 Reply Last reply Reply Quote 0
                                • M
                                  michmoor LAYER 8 Rebel Alliance @NotJohn
                                  last edited by

                                  @notjohn Yes.
                                  For example on my Windows 10 client

                                  netstat -ano | findstr 5353
                                    UDP    0.0.0.0:5353           *:*                                    16988
                                    UDP    0.0.0.0:5353           *:*                                    16988
                                    UDP    0.0.0.0:5353           *:*                                    21312
                                    UDP    0.0.0.0:5353           *:*                                    21312
                                    UDP    0.0.0.0:5353           *:*                                    3424
                                    UDP    0.0.0.0:5353           *:*                                    21312
                                    UDP    0.0.0.0:5353           *:*                                    16988
                                    UDP    192.168.40.1:5353      *:*                                    3100
                                    UDP    192.168.50.241:5353    *:*                                    3100
                                    UDP    192.168.80.1:5353      *:*                                    3100
                                    UDP    [::1]:5353             *:*                                    3100
                                  
                                  

                                  Firewall: NetGate,Palo Alto-VM,Juniper SRX
                                  Routing: Juniper, Arista, Cisco
                                  Switching: Juniper, Arista, Cisco
                                  Wireless: Unifi, Aruba IAP
                                  JNCIP,CCNP Enterprise

                                  N 1 Reply Last reply Reply Quote 0
                                  • N
                                    NotJohn @michmoor
                                    last edited by

                                    @michmoor fc732572-f9f8-4ef6-b503-a4ed7f10fbf4-image.png
                                    the above is my test on 3389 so no its not listening for 25565

                                    M 1 Reply Last reply Reply Quote 0
                                    • M
                                      michmoor LAYER 8 Rebel Alliance @NotJohn
                                      last edited by

                                      @notjohn hence your problem. Im not a minecraft expert here so dont know why your application isn't listening on the intended port but PFsense is not at fault.

                                      Firewall: NetGate,Palo Alto-VM,Juniper SRX
                                      Routing: Juniper, Arista, Cisco
                                      Switching: Juniper, Arista, Cisco
                                      Wireless: Unifi, Aruba IAP
                                      JNCIP,CCNP Enterprise

                                      N 1 Reply Last reply Reply Quote 0
                                      • N
                                        NotJohn @michmoor
                                        last edited by

                                        @michmoor seems strange though because its just a port to open its not specific to minecraft, just the default port the game uses, so the fact it isnt getting through is fishy

                                        M 1 Reply Last reply Reply Quote 0
                                        • M
                                          michmoor LAYER 8 Rebel Alliance @NotJohn
                                          last edited by

                                          @notjohn Im not sure you understand whats happening here.
                                          The port is not open on your server. If the port is not open then why expect any outside connections to it to work?
                                          Port 3389 is open on your server. The port is allowed on the firewall. Hence RDP is working.
                                          Port 25565 is not open on your server. The port is allowed on the firewall. How can traffic be redirected to a port thats not open? You need to fix that.
                                          Not a pfsense issue

                                          Firewall: NetGate,Palo Alto-VM,Juniper SRX
                                          Routing: Juniper, Arista, Cisco
                                          Switching: Juniper, Arista, Cisco
                                          Wireless: Unifi, Aruba IAP
                                          JNCIP,CCNP Enterprise

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.