Rdr by source IP and port

joaohf

Hello,

I need to make a crazy rule for a crazy protocol. For example:

rdr pass on xl0 proto { tcp udp } from xxx.xxx.xxx.xxx port { 6767 } to yyy.yyy.yyy.yyy -> 10.0.1.55 port 6767
rdr pass on xl0 proto { tcp udp } from xxx.xxx.xxx.xxx port { 6768 } to yyy.yyy.yyy.yyy -> 10.0.1.55 port 6767

In the webgui i dont know how create it.

Have pfsense suport to this type of nat? If no, is easy code in webgui?

Thanks.

hoba

There is no support for source IP based NAT.

joaohf

To has support, I need code this. Ok?

hoba

Yes and submit your work so we can include it ;D

joaohf

Hello,

I started same work do add rdr by source IP and port in Pfsense.

The image attached show webgui in rdr rules.

The code function well, but I not exhaustingly test yet. At least this generate the correct rules for rdr.

How the best way to report my code in Pfsense?

rdr.png_thumb

hoba

Attach your changes as diff against our head codetree. All needed files. This won't go into 1.0 but we can add it to our headcodetree.

martin.beauchamp

Hi Awesome pfSense People!

I need this feature as well. Has this been added to HEAD?

Is there a way that I can help test this on an embedded install?

Thanks,
Martin

hoba

Afaik we never got these changes.

martin.beauchamp

Well, I PM'ed joaohf a week ago and haven't heard anything.

Can anyone point me to the relevant docs to get started on this feature?

Thanks,
Martin

joaohf

Martin,

I have code this feature in my tests in RELEASE 1.0.1 its work well. But need move to test in a HEAD environment and post the diffs here.

Splat

I need this as well to set up a rdr to my proxy server.

joaohf

Hello,

See this link (past in browser) :

http://paginas.terra.com.br/informatica/joaohf/pfsense/filter.diff
http://paginas.terra.com.br/informatica/joaohf/pfsense/filter.inc
http://paginas.terra.com.br/informatica/joaohf/pfsense/firewall_nat_edit.diff
http://paginas.terra.com.br/informatica/joaohf/pfsense/firewall_nat_edit.php

Apply the diff in RELEASE 1.0.1.

I dont have a cvs HEAD build of pfsense to test this code. But in RELEASE 1.0.1 work for me. Not 100% but is a started.

Ok?

filter_diff.txt
firewall_nat_edit_diff.txt

billm

One comment. Please make it resemble the rules screen where source port is hidden until the advanced button is clicked. This isn't a feature that most people will want/use and I'd like to see no influx of support requests because people incorrectly chose the option and their port forwards don't work (and yes, this really does happen).

–Bill

greatbob6

Has any more work been done on this? I need this functionality as well.