Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    NAT only work in the PfSense BOX not other client in LAN [solved with 2.0]

    Scheduled Pinned Locked Moved NAT
    33 Posts 3 Posters 13.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      Metu69salemi
      last edited by

      Have you tried to boot?

      Just kidding. you're rules seems to be ok. My settings is almost the same and those work well.
      That public ip address, is it hardware ip-address or some sort of virtual ip, if virtual what kind of?

      1 Reply Last reply Reply Quote 0
      • S
        syedadi
        last edited by

        External IP add is hardware base, not virtual. I assign it manually. Reboot? not yet….it seem the port forward only respond in the BOX itself, could not go outside because the SSH and web-configuration can be access with out any problems.  :'( What version do you used? i'm using

        2.0-RC3 (i386)
        built on Thu Aug 4 12:47:50 EDT 2011

        letter i try to reboot after all client gone off-line.  :-[

        1 Reply Last reply Reply Quote 0
        • M
          Metu69salemi
          last edited by

          No need to boot, it was a joke.

          But the real question was, how many public ip-addresses you have and how many you try to use in this setup?

          1 Reply Last reply Reply Quote 0
          • S
            syedadi
            last edited by

            In that BOX i only used one, but in the ADSL router, we have 5 IP….

            i think the problems is in the box because i can doNAT using Untangle server to the same web server....i think it bug..what version do you used?

            1 Reply Last reply Reply Quote 0
            • M
              Metu69salemi
              last edited by

              Is there any reason to have routing dsl box between internet and pfsense? if not try to setup that in bridging mode. that ease up a little troubleshooting.
              atm i'm using really old version(built on Mon Jul 11 19:53:22 EDT 2011 ) waiting a good time to update. i had no problems with the older ones so i'm not waiting  problems when updating.

              1 Reply Last reply Reply Quote 0
              • S
                syedadi
                last edited by

                no any routing there…just direct to the pf BOX...

                the UTbox run fine for NAT, PFbox make me want to cry  :'(

                1 Reply Last reply Reply Quote 0
                • M
                  Metu69salemi
                  last edited by

                  check this: wan side of your pfsense, does it get public ip or what kind of it gets?

                  1 Reply Last reply Reply Quote 0
                  • S
                    syedadi
                    last edited by

                    Yes, it is public IP that i put it manually..i can ping the IP from outside.

                    1 Reply Last reply Reply Quote 0
                    • M
                      Metu69salemi
                      last edited by

                      Does your modem get public ip with dhcp or do you have static ip-addresses

                      1 Reply Last reply Reply Quote 0
                      • S
                        syedadi
                        last edited by

                        my modem was setting to put the IP staticaly

                        1 Reply Last reply Reply Quote 0
                        • M
                          Metu69salemi
                          last edited by

                          What kind of connection you have to internet pppoe? or something else?

                          1 Reply Last reply Reply Quote 0
                          • S
                            syedadi
                            last edited by

                            Yes PPPOE and the connection made in the modem

                            1 Reply Last reply Reply Quote 0
                            • M
                              Metu69salemi
                              last edited by

                              What if you change pppoe to the pfsense? and leave modem to be only mediaconverter(rj45 to rj11)

                              1 Reply Last reply Reply Quote 0
                              • S
                                serangku
                                last edited by

                                thats double NAT
                                you should make double port forward too …

                                make pppoe dialed from pfsense, modem just on bridge
                                so NAT only on pfsense box, thats easier to troubleshoot then

                                1 Reply Last reply Reply Quote 0
                                • S
                                  syedadi
                                  last edited by

                                  @serangku:

                                  thats double NAT
                                  you should make double port forward too …

                                  make pppoe dialed from pfsense, modem just on bridge
                                  so NAT only on pfsense box, thats easier to troubleshoot then

                                  What do you mean double NAT? i don't understand? how can it be so complicated in PF box, because when using Untangle BOX it doing just fine with a simple port forward…  :'(

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    syedadi
                                    last edited by

                                    @Metu69salemi:

                                    What if you change pppoe to the pfsense? and leave modem to be only mediaconverter(rj45 to rj11)

                                    I can't do that because i've 5 IPs from that modem…if i removed it, that should be too complicated for me to used other IPs..

                                    1 Reply Last reply Reply Quote 0
                                    • M
                                      Metu69salemi
                                      last edited by

                                      I've got also 5 static ip's and uncontinous block, but in same subnet so i created carp vips for the "extra ip's" fifth one was given in installation point so there was no need to create fifth carp vip.

                                      Please read howto's those are really selfexplaining. And if don't want go todo that way, fine it's your decision, but then i'm not able to help you any further

                                      1 Reply Last reply Reply Quote 0
                                      • S
                                        syedadi
                                        last edited by

                                        Thanks  :D

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          syedadi
                                          last edited by

                                          still no luck for me to do the 'NAT'ing…i've try other distro, the NAT went smoothly with out any trouble..i need to setup the nat in the pfsense....  :'( now using built on Wed Aug 24 10:02:03 EDT 2011

                                          1 Reply Last reply Reply Quote 0
                                          • M
                                            Metu69salemi
                                            last edited by

                                            Screenshots would do miracles

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.