Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    unable to get firewall to route traffic

    Scheduled Pinned Locked Moved NAT
    52 Posts 5 Posters 4.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Bob.DigB
      Bob.Dig LAYER 8 @zari90
      last edited by Bob.Dig

      @zari90 said in unable to get firewall to route traffic:

      10 machine is not in dns

      It is not about DNS at this point. If you test the port of your WAN-IP from the outside, it should create a state on WAN if there is a rule for that. For whatever reason now there is something shown for your first rule. Don't take the screenshot to quick after the port test, wait some seconds and reload the page before you take a screenshot or look.

      Z 1 Reply Last reply Reply Quote 0
      • Z
        zari90 @Bob.Dig
        last edited by

        @Bob-Dig
        okay tried both domain name and WAN-IP but port still seems to closed

        Bob.DigB M 2 Replies Last reply Reply Quote 0
        • Bob.DigB
          Bob.Dig LAYER 8 @zari90
          last edited by

          @zari90 Look at the states.

          Z 1 Reply Last reply Reply Quote 0
          • M
            MoonKnight @zari90
            last edited by

            @zari90
            What protocol are your service running at? TCP or UDP?
            Not all port-tester can to UDP port test.

            --- 24.11 ---
            Intel(R) Xeon(R) CPU D-1518 @ 2.20GHz
            Kingston DDR4 2666MHz 16GB ECC
            2 x HyperX Fury SSD 120GB (ZFS-mirror)
            2 x Intel i210 (ports)
            4 x Intel i350 (ports)

            Z 1 Reply Last reply Reply Quote 0
            • Z
              zari90 @Bob.Dig
              last edited by

              @Bob-Dig
              can see the state yes trickling in but port checker still shows port is closed on both NAT port forward rules

              Bob.DigB 1 Reply Last reply Reply Quote 0
              • Z
                zari90 @MoonKnight
                last edited by

                @MoonKnight
                for jellyfin its tcp/udp and the other is just tcp

                1 Reply Last reply Reply Quote 0
                • Bob.DigB
                  Bob.Dig LAYER 8 @zari90
                  last edited by Bob.Dig

                  @zari90 So that is a good sign, your pfSense-WAN was receiving the connections! Now the problem is on your hosts, maybe the windows firewall is blocking something or whatever but it is not within pfSense, from what you have told us.

                  Z 2 Replies Last reply Reply Quote 0
                  • Z
                    zari90 @Bob.Dig
                    last edited by

                    @Bob-Dig
                    21dfd575-9c3d-4ca2-9de2-2b327e6b8e58-image.png
                    3df41420-8388-4887-90f8-86775a3eae2a-image.png
                    fa79df85-b6ce-4b63-bd45-e4113f471cf7-image.png

                    showing there is traffic but nothing ports still closed

                    1 Reply Last reply Reply Quote 0
                    • Z
                      zari90 @Bob.Dig
                      last edited by

                      @Bob-Dig
                      can't access jellyfin externally either

                      Bob.DigB 1 Reply Last reply Reply Quote 0
                      • Bob.DigB
                        Bob.Dig LAYER 8 @zari90
                        last edited by

                        @zari90 Outbound NAT is still on automatic? Gateways are default? Then there es nothing I could tell you.

                        Z 2 Replies Last reply Reply Quote 0
                        • Z
                          zari90 @Bob.Dig
                          last edited by

                          @Bob-Dig

                          everything still default only port change for pfsense 10443 so nothing else changed

                          1 Reply Last reply Reply Quote 0
                          • Z
                            zari90 @Bob.Dig
                            last edited by

                            @Bob-Dig
                            and this was changed to pure NAT828d5e4d-4751-45f7-bb03-46c3d63c77a4-image.png

                            Bob.DigB 1 Reply Last reply Reply Quote 0
                            • Bob.DigB
                              Bob.Dig LAYER 8 @zari90
                              last edited by

                              @zari90 Pure NAT might be okay for beginners but also it has nothing to do with your problem. Maybe try another port tester like GRC | ShieldsUP! But again, it is not with pfSense anymore, must be your machines now.

                              Z 1 Reply Last reply Reply Quote 0
                              • Z
                                zari90 @Bob.Dig
                                last edited by

                                @Bob-Dig
                                if I use cloudflared docker container then I can get to the sites no issue so not sure why it isn't working normally okay thanks will poke around more

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.