Opening the firewall port [new]
-
-
Well from looking at the first picture your WAN is a private - so its behind a NAT.. Did you forward the port you want to use at the Nat device in front of pfsense? Did you put pfsense in the dmz of that first nat device?
Why do you even have a NAT in front of pfsense? Pfsense is designed to be the role of your NAT Router/Firewall at your gateway.
-
In practice, my LAN formed by an ADSL modem (10.0.0.1) with PPPoA, a NAT router/firewall (192.168.1.1) with pfSense and 6 computers.
So, how do I open in both directions the 31950 port on the Pluto computer (192.168.1.3)?
Thanks
Bye
-
-
if the traffic reaching your pfsense wan already - then just create a port forward to whatever 192.168 address you want to send the traffic to.
You don't change the default deny rule - you put allows before it. Once you create a port forward it will automatically create the wan rule to allow the traffic
as to outbound by default all ports are open.
-
if the traffic reaching your pfsense wan already - then just create a port forward to whatever 192.168 address you want to send the traffic to.
You don't change the default deny rule - you put allows before it. Once you create a port forward it will automatically create the wan rule to allow the traffic
as to outbound by default all ports are open.
How do I create this rule?
Thanks
Bye
-
under port forward!
Firewall, NAT
-
under port forward!
Firewall, NAT
You try to look at my first post of this thread and you could tell me where I'm wrong.
By chance, I have to add some other rule? If so, which one?
Thanks
Bye
-
you don't show your firewall rules in those posts. And for another they are SO SMALL I can not read them.. Just attach them directly vs imgur or use something better than 500x500 freaking thumbnails.
What you show it like your going to create the rules - but not the actual rules being created. And again they are so small I can not make out the details. It was hard enough making out that you had a private on your wan.
-
-
show the rules in the firewall tab as well. Do you have source setup? You don't have the forward and the wan rule linked? Why not? When you create a port forward the system can auto create the wan rule for you. Seems you did not do that.
For all I know you have source ports setup - can not see them in your image.
-
-
Could you help me again?
Thanks
Bye
-
Your behind a NAT - so your destination is to a private IP that 10.x.x.x on your WAN interface - did you disable block private IPs on the wan interface? See attached pic
I don't see it in your wan rules - so I would have to assume you did. Did you have any other rules on say the floating tab?
Also I would try it without the aliases. Just put in the IP and ports vs using aliases. Does that fix the problem and allow the traffic?
edit: After checking your aliases again - that does not look like a 192 to me. Do you have a typo in your alias?? hard to say with such a small screenshot that I had to zoom in on trying to make it out.
-
-
Gawd it is such a pain in the trying to view your images – have to click into them that opens a new window then zoom in because are thumbnails of what your posting..
If the IP address your trying to forward too is wrong - its not going to work..
I don't see any rules in your floating tab. Did you change your rules to use just IP and port vs aliases?? Why is there anything listed in you NAT rules if your doing automatic NAT. You must of switch to manual at some point?
Delete your current rule and forward - create a NEW forward and let it auto create your wan rule. See below, see how used the actual IP and the actual port number vs alias.
See how when I look at the firewall wan rule shows it associated to port forward. Also delete all the stuff in your NAT section if your going to leave it on auto. And could you please just attach your images? It makes it SO MUCH Easier to view vs some outside place.
-
I tried to follow your instructions and delete all the rules that were in the Outbound table but the 31950 port remains closed. How come?
I have to create some rule in the table Floating? If so, which one?
Thanks
Bye
-
ARGH! Dude did you create a NEW NAT and let it create the rule using IP and Port vs your alias??
That is just clean up work - since from your post you had Auto Checked - so there shouldn't be any rules listed there unless your doing Manual NAT.
NO you don't have to create anything in the floating TAB!
-
ARGH! Dude did you create a NEW NAT and let it create the rule using IP and Port vs your alias??
That is just clean up work - since from your post you had Auto Checked - so there shouldn't be any rules listed there unless your doing Manual NAT.
NO you don't have to create anything in the floating TAB!
I understand that, setting to "Automatic outbound NAT rule generation", I should not create any rule in the table Port Forward but I should only have these settings:
Right?
Unfortunately, the 31950 port is still closed.
Now, where is the error?
Thanks
Bye
-
DONT USE THE FREAKING ALIAS!! How many times do I have to say it???
Put in the ACTUAL PORT and IP
And you don't even show your NAT rule – for all I know you don't have it! Do you still show firewall blocking the port?? Then your nat and rule are NOT being applied.
And if you post one more picture to imageshack -- I am done trying to help you!! It take me 2 freaking clicks and another window trying to make out something that is not even worth looking at.