Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PFSense 2.1 Release - NAT Reflection not working

    Scheduled Pinned Locked Moved NAT
    52 Posts 9 Posters 26.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S Offline
      Supermule Banned
      last edited by

      Is it possible to have remote access to the thing?

      1 Reply Last reply Reply Quote 0
      • D Offline
        Daniel.Rollins 0
        last edited by

        No, sorry.

        1 Reply Last reply Reply Quote 0
        • K Offline
          kejianshi
          last edited by

          You can use teamviewer to remote in if its installed on a connected computer.

          1 Reply Last reply Reply Quote 0
          • S Offline
            Supermule Banned
            last edited by

            It would be a lot easier to see whats wrong since I have NAT reflection here and its working fine.

            1 Reply Last reply Reply Quote 0
            • D Offline
              Daniel.Rollins 0
              last edited by

              I would be open to using teamviewer or similar to provide access while I watch but I can't just hand out passwords for remote access, especially to people I don't actually know.

              1 Reply Last reply Reply Quote 0
              • K Offline
                kejianshi
                last edited by

                You should sit and watch and type all the passwords.  Thats  what is good about teamviewer…  Otherwise I'd just suggest he SSH into your pfsense, proxy back a port and handle it via proxy, which is not smart for you unless you trust alot.

                1 Reply Last reply Reply Quote 0
                • S Offline
                  Supermule Banned
                  last edited by

                  Exactly the way I normally handle remote support to external clients.

                  @Daniel.Rollins:

                  I would be open to using teamviewer or similar to provide access while I watch but I can't just hand out passwords for remote access, especially to people I don't actually know.

                  1 Reply Last reply Reply Quote 0
                  • K Offline
                    kejianshi
                    last edited by

                    It would be sort of hard to pull a fast one with someone watching every move unless they didn't know anything about the box at all. :P

                    1 Reply Last reply Reply Quote 0
                    • S Offline
                      Supermule Banned
                      last edited by

                      Depending on the setup…. :)

                      I dont think it would be that timeconsuming. Maybe a couple of hours maximum.

                      1 Reply Last reply Reply Quote 0
                      • D Offline
                        Daniel.Rollins 0
                        last edited by

                        When would you be available to do a Team Viewer session and try to figure this out?

                        1 Reply Last reply Reply Quote 0
                        • S Offline
                          Supermule Banned
                          last edited by

                          What part of the world are you in Daniel?

                          1 Reply Last reply Reply Quote 0
                          • D Offline
                            Daniel.Rollins 0
                            last edited by

                            Utah (Mountain Time) Currently UTC-6.

                            1 Reply Last reply Reply Quote 0
                            • S Offline
                              Supermule Banned
                              last edited by

                              Perfect. Catch you on PM.

                              1 Reply Last reply Reply Quote 0
                              • S Offline
                                Supermule Banned
                                last edited by

                                Problem solved!

                                1 Reply Last reply Reply Quote 0
                                • K Offline
                                  kejianshi
                                  last edited by

                                  I'm dying with curiosity - What was the problem?

                                  1 Reply Last reply Reply Quote 0
                                  • D Offline
                                    Daniel.Rollins 0
                                    last edited by

                                    On the LAN interface configuration under Static IPV4 Configuration, the gateway should be set as none but I had it set to an internal address on my network. I guess it confused PFSense or something. The fix was to set the gateway back to "none".

                                    Thanks to Supermule for solving that one!

                                    1 Reply Last reply Reply Quote 0
                                    • K Offline
                                      kejianshi
                                      last edited by

                                      Really?  I never would have guessed:

                                      Second page of thread, halfway down:

                                      "I've seen that gateways have been renamed or changed mysteriously upon upgrade by some.
                                      In one case it just killed his RRD data.

                                      In another case the gateway inserted its self into the openvpn and WAN firewall rules.

                                      Could some sort of gateway rename/change/insertion have happened to you?

                                      I'm reaching…"

                                      haha - But yeah.  I think supermule would have known it anyway.

                                      I'm going to put the words "please ignore this" at the bottom of all my posts from now on.    ;D

                                      1 Reply Last reply Reply Quote 0
                                      • S Offline
                                        Supermule Banned
                                        last edited by

                                        It was a pleasure working with Daniel and nice to meet a fellow pfsense'r!! :)

                                        1 Reply Last reply Reply Quote 0
                                        • D Offline
                                          Daniel.Rollins 0
                                          last edited by

                                          @kejianshi:

                                          Really?  I never would have guessed:

                                          Second page of thread, halfway down:

                                          "I've seen that gateways have been renamed or changed mysteriously upon upgrade by some.
                                          In one case it just killed his RRD data.

                                          In another case the gateway inserted its self into the openvpn and WAN firewall rules.

                                          Could some sort of gateway rename/change/insertion have happened to you?

                                          I'm reaching…"

                                          haha - But yeah.  I think supermule would have known it anyway.

                                          I'm going to put the words "please ignore this" at the bottom of all my posts from now on.    ;D

                                          Well, the difference is that it didn't somehow change during an upgrade or something, I set it that way thinking that was the way it was supposed to be set. I did pay attention to the above statement but when I checked the gateways everything was as I set it.

                                          1 Reply Last reply Reply Quote 0
                                          • K Offline
                                            kejianshi
                                            last edited by

                                            Haha - Just giving you minor crap…

                                            I can see that happening.  Just yesterday I didn't think I could effectively run several websites off my one IP and kurianoftheborge (or something like that) set me straight.  (At least I think so - haven't tried it yet).

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.