Pfsense and OVH Configuration [HELP]
-
Between which hosts? How are you connecting?
-
@stephenw10 I'm connecting to the WAN address using an IP alias, a virtual IP (VIP) specifically. Within my CentOS 7 machine, I've set up port openings for two services: port 39101 for the web server and port 1433 for the database server. Both services are hosted on the same CentOS machine.
When attempting to access port 39101 for the web server, there are no issues, and I can successfully log in. However, when I attempt to access port 1433 for the database server, the connection is initially established but then abruptly closes. without encountering any errors.
Upon examining the server logs, it becomes apparent that port 1433 is being opened but then subsequently closed. This behavior is unexpected and is hindering the intended communication between these ports.
-
Check the states in Diag > States when you're trying to connect so see what the firewall is doing. If gets immediately rejected though it sounds like it could be forwarding correctly and the CentOS server is blocking it.
-
@stephenw10 here is the result. I tried to spam the login. so we can capture the result
-
Those states are for 38101 and you said 39101 above. But I see no states at all for 1433.
Is that traffic actually arriving at the WAN? Try adding logging to the pass rule on WAN. Or run pcap for port 1433 on WAN. -
@stephenw10 Sorry how to perform PCAP 1433 on WAN?
-
In Diag > Packet Capture like:
-
@stephenw10 Hi, base on the record. it didn't reach 1433 Port. it just stuck in 38101.
-
Well pfSense can't forward traffic that never arrives.
Maybe that port is blocked by OVH or your ISP.
Steve
-
@stephenw10 Hello sir Steve. I got some error.
I attempted to use SSH to access a CentOS 8 database server. Additionally, I used telnet to check port 38101. The connection was established, but it abruptly closed.
Port Forward Config
Nat 1:1 Config and Outbound = Hybrid
WAN Config
NAT Config -
What do the states show when you test that?
I assume that CentOS alias contains the correct two ports?
