Maping

Nachtfalke

On pfsense do this in portforwarding:

Source ip: any
Source port: any
Destination IP: WAN address
Destination port: 3389 (RDP)
Redirect ip: IP of the work PC
Redirect port: 3389
Create a firewall rule for that

Source IP: any
Source port: any
Destination IP: IP of the work PC
Destination Port: 3389.

thats all.

sleat

i did all but not work(((
Thats printscreens

http://zalil.ru/31960869

http://zalil.ru/31960878

Metu69salemi

and your windows firewall is allowing this trafic or is in shutoff?

sleat

Windows firewall is off

Nachtfalke

Firewall and NAT rules seem to be correct.
You could enable logging on the firewall rule and check if traffic comes in.

sleat

pls tell me, how i can to see logs? I trying do it in Stastus-system logs-firewall-dynamic view, but there only static data…

Nachtfalke

enable logging in the firewall rule you created for RDP.
then try to connect via RDP and then go to diagnostics -> systemlogs -> firewall

sleat

may be you mean status-systemlogs?

This is log…
http://zalil.ru/31962636

Nachtfalke

The firewall logs show that the ruleworks. tha traffic can pass.

The problem seems to be on the destination PC.
On windows 7 you can chose which version of RDP can connect.
Further the advanced firewall allows more options for inbound traffic. you can chose the subnets/IPs which are allowed for RDP.

I think that pfsense is not your problem.

kilogor

i have thats problem too((((
But if i try to connect using MS ISA2006, i can do it - i can connect to my PC and dont have any problem.
Thats mean problem is not my pc?

Nachtfalke

The firewall and NAT rule is correct as we can see in the firewall log.
RemoteDesktop from outside pfsense to a Client behind pfsense is working, too. I tried this in the past, too.

Perhaps you have some other packages installed which could cause a problem or some additional firewall rules which are blocking RDP.
Perhaps you could provide more information about:

packages
topology
OS of the clients you are using for RDP

kilogor

i have installed next package:

squid
lihgtSquid

Topology: I have PC with pfSense 2.0, one PC on my work and one PC at my Home
And also i have one static Internet address at work and dynamic address at home..

Client Os is windows XP SP3

Nachtfalke

WinXP at home –--- INTERNET --- pfsense -----WinXP at work
Correct ?

I had the same topology as you, with squid and lightsquid and it worked. So it shouldn't be the problem of the packages and/or pfsense.
perhaps reboot pfsense or recheck the firewall on the windows clients, check if RDP for the correct users is enabled.

I don't have any further ideas - I am sorry.

Metu69salemi

what xp you have at home? if it is home edition, then it should not have rdp possibility

kilogor

@Metu69salemi:

what xp you have at home? if it is home edition, then it should not have rdp possibility

I have Windows XP Pro…But you very help me, thanks ! I will try again and again...

Metu69salemi

I don't know the contents of the easy block rule, but change it to be last on the list and the portforward rule to be third on the list.

kilogor

Yesterday, i tried to connect from Windows 7, the same result :'(
For example i installed ISA2006 and tried to connect and-WOW-connect is done!
I think, that my pfSense dont wanna to work whith me((((