Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Setting up Port Forwarding for Minecraft Server on pfSense

    Scheduled Pinned Locked Moved NAT
    8 Posts 2 Posters 7.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      Papa_Dragon
      last edited by

      Hello pfSense community!

      I'm seeking assistance with configuring port forwarding on my pfSense router for my Minecraft server. Here's a summary of my setup:

      My PC has a local IP address of 198.168.0.xxx.
      I need to forward TCP and UDP connections on port 25565 to my PC.
      I've already allowed incoming and outgoing connections on port 25565 in the Windows Defender firewall.
      Here are the steps I've taken in pfSense:

      Logged in to the pfSense web interface.

      Navigated to Firewall > NAT > Port Forward.

      Created a port forwarding rule as follows:

      For TCP/UDP

      Interface: WAN
      Protocol: TCP/UDP
      Source: Single host or alias > Type: WAN Address > Address/mask: leave blank
      Source port range: From port 25565, To port 25565
      Destination: WAN address
      Destination port range: From port 25565, To port 25565
      Redirect target IP: 198.168.0.xxx
      Redirect target port: Port 25565
      Description: Minecraft TCP/UDP
      NAT reflection: Use system default
      Filter rule association: None
      I've also gone as far as to create a rule for WAN. still nothing. I kindly request the community's review of my configuration. If I have overlooked any steps or if there are additional measures I need to take for the correct port forwarding setup for my Minecraft server, please let me know.

      Thank you for your support!

      S 1 Reply Last reply Reply Quote 0
      • S
        SteveITS Galactic Empire @Papa_Dragon
        last edited by

        @Papa_Dragon Source ports on the Internet are randomized…change your Source to Any.

        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
        Upvote 👍 helpful posts!

        P 1 Reply Last reply Reply Quote 0
        • P
          Papa_Dragon @SteveITS
          last edited by

          @SteveITS is everything else looking okay? Cause i tried just swapping the ports and i get nothing. the server is running off my PC not my actual server/homelab

          S 1 Reply Last reply Reply Quote 0
          • S
            SteveITS Galactic Empire @Papa_Dragon
            last edited by

            @Papa_Dragon I'm not clear what you swapped...the Source port should be any port.

            https://docs.netgate.com/pfsense/en/latest/nat/port-forwards.html#port-forward-settings
            "Unless the service absolutely requires a specific source port, the Source Port Range must be left as any since nearly all clients will use randomized source ports."

            Also see https://docs.netgate.com/pfsense/en/latest/troubleshooting/nat-port-forwards.html. Note the PC's firewall must allow connections from the Internet.

            Redirect target IP: 198.168.0.xxx
            ...might be a typo but 198.168.x.x is not a private IP rang.e

            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
            Upvote 👍 helpful posts!

            P 1 Reply Last reply Reply Quote 0
            • P
              Papa_Dragon @SteveITS
              last edited by

              @SteveITS

              perfect!! i got working. i just had to delete the old one and created a new one
              this is what i did

              Disable: Leave this unchecked (enabled).
              No RDR (NOT): Leave this unchecked.
              Interface: Select "WAN" from the dropdown menu.
              Address Family: Select "IPv4" from the dropdown menu.
              Protocol: Select "TCP/UDP" from the dropdown menu.
              Source: Leave it as "any source."
              Destination: Select "WAN address" from the dropdown menu.
              Destination port range: Enter "25565" in the "From port" box, and leave the "To port" box blank.
              Redirect target IP: Enter your local PC's IP address (e.g., 198.168.0.xxx).
              Redirect target port: Enter "25565."
              Description: Add a short description to help you identify the port forward rule.

              also the 198.168.0.xxx is infact my IP address range, i just didn't want to post it. thanks for the helop

              S 1 Reply Last reply Reply Quote 0
              • S
                SteveITS Galactic Empire @Papa_Dragon
                last edited by

                @Papa_Dragon Glad it's working.

                One wouldn't normally need a NAT forward for a public IP range though... if you're not at Gwynedd Mercy College that'll technically work behind NAT but devices on LAN won't be able to connect to the actual Gwynedd Mercy College subnet.

                Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                Upvote 👍 helpful posts!

                P 1 Reply Last reply Reply Quote 0
                • P
                  Papa_Dragon @SteveITS
                  last edited by

                  @SteveITS im in Alberta Canada, so i have no idea what IP address that is. lol. i just pulled one from my head...

                  S 1 Reply Last reply Reply Quote 0
                  • S
                    SteveITS Galactic Empire @Papa_Dragon
                    last edited by

                    @Papa_Dragon
                    https://www.rfc-editor.org/rfc/rfc1918

                    FWIW I have also seen the occasional program that detects whether or not it's on a private IP range and changes its behavior accordingly. Or, private networks are allowed by default, public are not, etc.

                    Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                    When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                    Upvote 👍 helpful posts!

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.