Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Port restriction rule!

    Scheduled Pinned Locked Moved Firewalling
    79 Posts 3 Posters 5.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by stephenw10

      So 3 possibilities:
      The client is not even trying to open a connection.
      The firewall is blocking the connection.
      The client is not using port 445

      A packet capture on the client interface would confirm it.

      But I'm going to guess the client isn't even trying. That 'network path' error makes it seem like it's trying to connect directly.

      A 2 Replies Last reply Reply Quote 0
      • A
        Antibiotic @stephenw10
        last edited by

        @stephenw10 Under client name , do you mean Host pc on subnet 192.168.10.1?

        pfSense plus 24.11 on Topton mini PC
        CPU: Intel N100
        NIC: Intel i-226v 4 pcs
        RAM : 16 GB DDR5
        Disk: 128 GB NVMe
        Brgds, Archi

        1 Reply Last reply Reply Quote 0
        • A
          Antibiotic @stephenw10
          last edited by

          @stephenw10 Have kaspersky firewall rules

          Screenshot (2).png

          pfSense plus 24.11 on Topton mini PC
          CPU: Intel N100
          NIC: Intel i-226v 4 pcs
          RAM : 16 GB DDR5
          Disk: 128 GB NVMe
          Brgds, Archi

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Try disabling that local firewall entirely as a test.

            A 1 Reply Last reply Reply Quote 0
            • A
              Antibiotic @stephenw10
              last edited by

              @stephenw10
              Disabled, all the same

              pfSense plus 24.11 on Topton mini PC
              CPU: Intel N100
              NIC: Intel i-226v 4 pcs
              RAM : 16 GB DDR5
              Disk: 128 GB NVMe
              Brgds, Archi

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                Check if it's opening any states.

                Check in a pcap if it's even sending anything.

                Try a different client.

                1 Reply Last reply Reply Quote 0
                • A
                  Antibiotic @johnpoz
                  last edited by Antibiotic

                  @johnpoz I have read in official statement that MULLVAD block port 25. Because of a Microsoft security issue, we also block ports 137, 138, 139, and 445. Could be this a cause of provlem with sharing?Local subnet 192.168.20.1 using MullvadVPN

                  pfSense plus 24.11 on Topton mini PC
                  CPU: Intel N100
                  NIC: Intel i-226v 4 pcs
                  RAM : 16 GB DDR5
                  Disk: 128 GB NVMe
                  Brgds, Archi

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @Antibiotic
                    last edited by johnpoz

                    @Antibiotic most internet providers block those ports.. Those would not run over the internet no.. Your vpn client you have setup on pfsense would have zero to do with you talking to some client on another one of your networks..

                    Your not policy routing out your vpn are you.. That would prevent you from talking to other devices on other networks/vlans.. ping shouldn't work either..

                    What are you rules on the client side interface on pfsense? The rules on the server side, where your file shares are mean nothing in accessing something on that network from the client. Do you have rules in floating forcing traffic out a vpn connection?

                    When you policy route, and you want to access stuff on your other networks you need to make sure you setup a bypass to allow what you want.

                    https://docs.netgate.com/pfsense/en/latest/multiwan/policy-route.html#bypassing-policy-routing

                    Have you done the 30 second sniff to validate traffic is going to your share?? It really is like 30 seconds to validate this.. Have you looked in your state table?

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    A 2 Replies Last reply Reply Quote 0
                    • A
                      Antibiotic @johnpoz
                      last edited by Antibiotic

                      @johnpoz said in Port restriction rule!:

                      Do you have rules in floating forcing traffic out a vpn connection?

                      Can you please to show example?

                      pfSense plus 24.11 on Topton mini PC
                      CPU: Intel N100
                      NIC: Intel i-226v 4 pcs
                      RAM : 16 GB DDR5
                      Disk: 128 GB NVMe
                      Brgds, Archi

                      1 Reply Last reply Reply Quote 0
                      • A
                        Antibiotic @johnpoz
                        last edited by

                        @johnpoz said in Port restriction rule!:

                        https://docs.netgate.com/pfsense/en/latest/multiwan/policy-route.html#bypassing-policy-routing

                        d4cab2a0-036c-4732-b23b-033f2863ee09-image.png

                        pfSense plus 24.11 on Topton mini PC
                        CPU: Intel N100
                        NIC: Intel i-226v 4 pcs
                        RAM : 16 GB DDR5
                        Disk: 128 GB NVMe
                        Brgds, Archi

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.