Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Would it be Forwarding or Outbound?

    Scheduled Pinned Locked Moved NAT
    38 Posts 3 Posters 3.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • O
      o12eMaRkAbLeo @johnpoz
      last edited by o12eMaRkAbLeo

      @johnpoz

      I have already done that I think yesterday.
      2487aa69-b374-4afe-8263-6019a890e279-image.png

      The .11 isn't showing up in the pfctl -sn output. That is why I decided to build the rule to allow static porting on ipv6 to see if it would show up in the output. It is but still not accepting the static routing.

      Assigned another network port to LAN2

      14c036a0-518b-4259-a701-48599aa9659c-image.png

      pfctl -sn output after changes
      b89f22c6-a469-442d-83d5-e8a374099fc7-image.png

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @o12eMaRkAbLeo
        last edited by johnpoz

        @o12eMaRkAbLeo on your normal lan, just a normal rule - not a outbound nat.. See my above example where I did it on my lan.. Nothing to do with nat.. Just a rule on an interface.

        I want to verify its just outbound nat your having a problem with and not writing rules in general..

        rule.jpg

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        O 1 Reply Last reply Reply Quote 0
        • O
          o12eMaRkAbLeo @johnpoz
          last edited by

          @johnpoz

          64aa4ef6-cbff-4e07-a05f-db00339de454-image.png

          pfctl -sr | grep Factorio
          a0f8e9a4-8284-4d3e-9ffa-5b7751575bbb-image.png

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @o12eMaRkAbLeo
            last edited by johnpoz

            @o12eMaRkAbLeo and that tells me nothing.. Where is the new rule you created? you grep for Factorio - and thre is no rules on your lan for that in your gui post.

            See above I created what was clearly a new rule TestRule - and then I look for that in my rules via sr and you can clearly see it there.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            O 1 Reply Last reply Reply Quote 0
            • O
              o12eMaRkAbLeo @johnpoz
              last edited by

              @johnpoz

              6dc51287-9c59-45c8-ada4-54912a349292-image.png

              After adding the same exact output "pfctl -sr | grep Factorio" no change.

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @o12eMaRkAbLeo
                last edited by

                @o12eMaRkAbLeo so no rules are being added then..

                Vs using some rule wiith a name on that you already have listed in your rules.. Wouldn't it have been easier and clearer to call it say "testrule:" or testnewrule..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                O 1 Reply Last reply Reply Quote 0
                • O
                  o12eMaRkAbLeo @johnpoz
                  last edited by o12eMaRkAbLeo

                  @johnpoz

                  This could be true but I wanted to involve everything that we are working on.

                  But technically that isn't true. I did at the ipv6 NAT rule I put in place...

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @o12eMaRkAbLeo
                    last edited by johnpoz

                    @o12eMaRkAbLeo said in Would it be Forwarding or Outbound?:

                    at the ipv6 NAT rule

                    Huh - why would you create a IPv6 nat rule????? That makes no sense..

                    Could you just do a clear and simple test.. add a rule on lan, with a very easy to understand description that doesn't line up with what your doing.. like testnewrule and then look in your rules.. Do you see that new rule or not?

                    https://docs.netgate.com/pfsense/en/latest/troubleshooting/firewall.html#ruleset-failing-to-load

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    O 1 Reply Last reply Reply Quote 0
                    • O
                      o12eMaRkAbLeo @johnpoz
                      last edited by o12eMaRkAbLeo

                      @johnpoz

                      Firewall Rules
                      2f7b8317-5780-471b-afe5-e76b2ce79647-image.png

                      NAT Port Forwarding
                      c3ec411e-f151-4485-917d-5863a5a0ef1b-image.png

                      NAT Outbound
                      99dae773-99ca-4b79-801e-ba5a62cbcef6-image.png

                      Forced Filter Reload
                      97af3d67-cac4-46be-98da-34f4e39d0bdb-image.png

                      179d1466-0c27-4d39-b60a-0dff596ff5f3-image.png

                      446bd122-c3b2-4751-bd4a-fe774f6866b7-image.png

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @o12eMaRkAbLeo
                        last edited by johnpoz

                        @o12eMaRkAbLeo that is a horrible name to try and grep for.. pretty sure you would need to atleast quote that..

                        I mean do you have a bunch of other rules called testrule ?

                        Did your output ever get to done?

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        O 1 Reply Last reply Reply Quote 0
                        • O
                          o12eMaRkAbLeo @johnpoz
                          last edited by

                          @johnpoz

                          I turned pfBlocker off it was causing some errors and not allowing the reload of the filters to complete

                          a535a518-4dfe-4fd9-98ca-23797796f6e4-image.png

                          johnpozJ 1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @o12eMaRkAbLeo
                            last edited by

                            @o12eMaRkAbLeo said in Would it be Forwarding or Outbound?:

                            not allowing the reload of the filters to complete

                            Well that looks like the problem solved then.. I see your static port in there now.

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            O 1 Reply Last reply Reply Quote 1
                            • O
                              o12eMaRkAbLeo @johnpoz
                              last edited by o12eMaRkAbLeo

                              @johnpoz

                              Thank you for all your assistance! It is up and working!

                              Just have to clean up pfBlocker and get 0 errors now...

                              johnpozJ 1 Reply Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator @o12eMaRkAbLeo
                                last edited by

                                @o12eMaRkAbLeo glad you got it sorted.. It was an odd one.. I did you had pfblocker there with auto rules. But figured you would of seen an error from before when I asked you to watch the reload.

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.