Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Port forwarding doesn't work

    Scheduled Pinned Locked Moved NAT
    37 Posts 4 Posters 2.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator @A Former User
      last edited by johnpoz

      @taylorswift That is your traffic to and from the website.. You need to look for traffic to your IP on 443 and 80..

      Make sure you like set the count of packets to like 0 or it could finish before you even send your traffic. And might be easier if you download and open in wireshark so easier to look for the specific traffic

      here is where they sent to me on 443, I answer because I serve up something on 443.. But here you can see where they sent the syn to my public IP, and where I answer with syn,ack

      sniff.jpg

      Your going to want to make sure you see a syn to port 443 in your sniff.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      ? 1 Reply Last reply Reply Quote 0
      • ?
        A Former User @johnpoz
        last edited by

        @johnpoz
        I think I've got the point. My isp blocks ports 80 and 443. Tomorrow I'll try to do that on other port, but there might be problem with Let's Encrypt SSL.

        johnpozJ 1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @A Former User
          last edited by

          @taylorswift doesn't matter if ssl is broken, doesn't matter if you have anything listening or anything.. If you send traffic to your IP on 443, then you should see it in the packet capture. If not then no port forward would never work.

          See my edit from above.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          ? 2 Replies Last reply Reply Quote 0
          • ?
            A Former User @johnpoz
            last edited by A Former User

            @johnpoz
            I can't see 80 or 443 in packet capture, but on other ports I see. So if I run the website on, say, port 773, port forwarding won't work?

            johnpozJ V 2 Replies Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @A Former User
              last edited by johnpoz

              @taylorswift you could for sure use another port.. If you can see the traffic hit your wan, then you can forward it.. You could even forward it to something on 443.. keep in my for a user to access your site they would need to include your port..

              http(s)://yourIPorfqdn:port

              Browser used by some where http:// would use 80,. https:// would use 443.. If you want to use another port they would have to use the :port in their uri

              I run a site on 44301 because it was just easier than messing with haproxy to do another service on 443.. I have openvpn listen on 443, if not vpn traffic it sends it to haproxy on 9443, which forwards to a backend service and does the ssl offload for it.

              Vs messing with that setup, I put up a wrapperr thing for users to view their years stats on my plex server, was just easier to use different port.. And I send them a direct link ie https://fqdn:44301 that they just click on..

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • ?
                A Former User @johnpoz
                last edited by A Former User

                @johnpoz
                I also found out that port 8443, witch also is using for https I can see in packet capture, same as port 8080 for http.

                1 Reply Last reply Reply Quote 0
                • V
                  viragomann @A Former User
                  last edited by

                  @taylorswift
                  Remember that Lets Encrypt with webroot needs access to port 80 to hand out certs.

                  ? johnpozJ 2 Replies Last reply Reply Quote 0
                  • ?
                    A Former User @viragomann
                    last edited by

                    @viragomann
                    Is there a way to Let's Encrypt use other port?

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @viragomann
                      last edited by

                      @viragomann said in Port forwarding doesn't work:

                      access to port 80 to hand out certs.

                      Not really - just use dns to validate and get your certs. That is how I do it..

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      V ? 2 Replies Last reply Reply Quote 0
                      • V
                        viragomann @johnpoz
                        last edited by

                        @johnpoz
                        Yes, I know. I mentioned, this is with webroot identification, which is the default and widely used.

                        johnpozJ 1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator @viragomann
                          last edited by

                          @viragomann said in Port forwarding doesn't work:

                          which is the default and widely used

                          Not for people that isp block inbound to 80 ;) like this guy..

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          V 1 Reply Last reply Reply Quote 0
                          • V
                            viragomann @johnpoz
                            last edited by

                            @johnpoz
                            I‘m in doubt, that his ACME client is knowing that. 😉

                            johnpozJ 1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator @viragomann
                              last edited by

                              @viragomann exactly..

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • ?
                                A Former User @johnpoz
                                last edited by A Former User

                                I'll ask my ISP can he open these ports.
                                Thank you @viragomann and @johnpoz for help.

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.