Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Firewall will forward RDP but not anything else

    Scheduled Pinned Locked Moved Firewalling
    19 Posts 3 Posters 599 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      NotJohn @michmoor
      last edited by

      @michmoor i turned off my windows firewall to solve this and it has not been turned back on yet

      M 1 Reply Last reply Reply Quote 0
      • M
        michmoor LAYER 8 Rebel Alliance @NotJohn
        last edited by michmoor

        @notjohn
        On the server run the following
        netstat -ano | findstr 25565

        Is the port listening?

        edit: Turning off windows firewall resolved this?

        Firewall: NetGate,Palo Alto-VM,Juniper SRX
        Routing: Juniper, Arista, Cisco
        Switching: Juniper, Arista, Cisco
        Wireless: Unifi, Aruba IAP
        JNCIP,CCNP Enterprise

        1 Reply Last reply Reply Quote 0
        • N
          NotJohn @michmoor
          last edited by

          @michmoor
          33906774-cce5-4d8f-aa83-0cddad48b580-image.png

          M 1 Reply Last reply Reply Quote 0
          • M
            michmoor LAYER 8 Rebel Alliance @NotJohn
            last edited by

            @notjohn you execute the command on your Windows box - the same one you have RDP enabled on.

            Firewall: NetGate,Palo Alto-VM,Juniper SRX
            Routing: Juniper, Arista, Cisco
            Switching: Juniper, Arista, Cisco
            Wireless: Unifi, Aruba IAP
            JNCIP,CCNP Enterprise

            N 1 Reply Last reply Reply Quote 0
            • N
              NotJohn @michmoor
              last edited by

              @michmoor so i need to run this directly on the server's shell?

              M 1 Reply Last reply Reply Quote 0
              • M
                michmoor LAYER 8 Rebel Alliance @NotJohn
                last edited by

                @notjohn Yes.
                For example on my Windows 10 client

                netstat -ano | findstr 5353
                  UDP    0.0.0.0:5353           *:*                                    16988
                  UDP    0.0.0.0:5353           *:*                                    16988
                  UDP    0.0.0.0:5353           *:*                                    21312
                  UDP    0.0.0.0:5353           *:*                                    21312
                  UDP    0.0.0.0:5353           *:*                                    3424
                  UDP    0.0.0.0:5353           *:*                                    21312
                  UDP    0.0.0.0:5353           *:*                                    16988
                  UDP    192.168.40.1:5353      *:*                                    3100
                  UDP    192.168.50.241:5353    *:*                                    3100
                  UDP    192.168.80.1:5353      *:*                                    3100
                  UDP    [::1]:5353             *:*                                    3100
                
                

                Firewall: NetGate,Palo Alto-VM,Juniper SRX
                Routing: Juniper, Arista, Cisco
                Switching: Juniper, Arista, Cisco
                Wireless: Unifi, Aruba IAP
                JNCIP,CCNP Enterprise

                N 1 Reply Last reply Reply Quote 0
                • N
                  NotJohn @michmoor
                  last edited by

                  @michmoor fc732572-f9f8-4ef6-b503-a4ed7f10fbf4-image.png
                  the above is my test on 3389 so no its not listening for 25565

                  M 1 Reply Last reply Reply Quote 0
                  • M
                    michmoor LAYER 8 Rebel Alliance @NotJohn
                    last edited by

                    @notjohn hence your problem. Im not a minecraft expert here so dont know why your application isn't listening on the intended port but PFsense is not at fault.

                    Firewall: NetGate,Palo Alto-VM,Juniper SRX
                    Routing: Juniper, Arista, Cisco
                    Switching: Juniper, Arista, Cisco
                    Wireless: Unifi, Aruba IAP
                    JNCIP,CCNP Enterprise

                    N 1 Reply Last reply Reply Quote 0
                    • N
                      NotJohn @michmoor
                      last edited by

                      @michmoor seems strange though because its just a port to open its not specific to minecraft, just the default port the game uses, so the fact it isnt getting through is fishy

                      M 1 Reply Last reply Reply Quote 0
                      • M
                        michmoor LAYER 8 Rebel Alliance @NotJohn
                        last edited by

                        @notjohn Im not sure you understand whats happening here.
                        The port is not open on your server. If the port is not open then why expect any outside connections to it to work?
                        Port 3389 is open on your server. The port is allowed on the firewall. Hence RDP is working.
                        Port 25565 is not open on your server. The port is allowed on the firewall. How can traffic be redirected to a port thats not open? You need to fix that.
                        Not a pfsense issue

                        Firewall: NetGate,Palo Alto-VM,Juniper SRX
                        Routing: Juniper, Arista, Cisco
                        Switching: Juniper, Arista, Cisco
                        Wireless: Unifi, Aruba IAP
                        JNCIP,CCNP Enterprise

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.