Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    To access pfsense

    Firewalling
    3
    5
    2.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      valliappan
      last edited by

      i have got a pfsense in my network the thing is i want to access this pfsense outside the network how do i do that i have a public ip can anybody help me

      1 Reply Last reply Reply Quote 0
      • GruensFroeschliG
        GruensFroeschli
        last edited by

        Please try to use punctuation….

        This forum provides a search function:
        http://forum.pfsense.org/index.php?action=search

        in short: create a firewall rule on the WAN-firewallrule-tab with
        source any
        source-port any
        destination WAN-address
        destination-port webgui-port

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • 0
          0tt0
          last edited by

          @GruensFroeschli:

          Please try to use punctuation….

          This forum provides a search function:
          http://forum.pfsense.org/index.php?action=search

          in short: create a firewall rule on the WAN-firewallrule-tab with
          source any
          source-port any
          destination WAN-address
          destination-port webgui-port

          Are you sure that should work? As I recall it I had to put my pfSense LAN address as the target to get it to work (after also having added NAT).

          NAT
          –---
          WAN  TCP  88  192.168.0.1 88

          FW rule WAN

          TCP  nn.nn.nn.nn/22  *  192.168.0.1  88

          Is the above setup not ok? (I mean it works, but that doesn't mean it's "the right way" necessarily).

          TIA

          1 Reply Last reply Reply Quote 0
          • GruensFroeschliG
            GruensFroeschli
            last edited by

            Your attampt should work.
            But dont set a source (i assume nn.nn.nn.nn/22 is your WAN subnet) otherwise you would have to be in this subnet to access the webgui.

            We do what we must, because we can.

            Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

            1 Reply Last reply Reply Quote 0
            • 0
              0tt0
              last edited by

              @GruensFroeschli:

              Your attampt should work.
              But dont set a source (i assume nn.nn.nn.nn/22 is your WAN subnet) otherwise you would have to be in this subnet to access the webgui.

              Yes I know, I have access enabled for one specific location and if I'm elsewhere I have to use VPN or RDP to another internal server first.

              Cheers,

              1 Reply Last reply Reply Quote 0
              • First post
                Last post