Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PFSense 2.1 Release - NAT Reflection not working

    Scheduled Pinned Locked Moved NAT
    52 Posts 9 Posters 26.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K Offline
      kejianshi
      last edited by

      You can use teamviewer to remote in if its installed on a connected computer.

      1 Reply Last reply Reply Quote 0
      • S Offline
        Supermule Banned
        last edited by

        It would be a lot easier to see whats wrong since I have NAT reflection here and its working fine.

        1 Reply Last reply Reply Quote 0
        • D Offline
          Daniel.Rollins 0
          last edited by

          I would be open to using teamviewer or similar to provide access while I watch but I can't just hand out passwords for remote access, especially to people I don't actually know.

          1 Reply Last reply Reply Quote 0
          • K Offline
            kejianshi
            last edited by

            You should sit and watch and type all the passwords.  Thats  what is good about teamviewer…  Otherwise I'd just suggest he SSH into your pfsense, proxy back a port and handle it via proxy, which is not smart for you unless you trust alot.

            1 Reply Last reply Reply Quote 0
            • S Offline
              Supermule Banned
              last edited by

              Exactly the way I normally handle remote support to external clients.

              @Daniel.Rollins:

              I would be open to using teamviewer or similar to provide access while I watch but I can't just hand out passwords for remote access, especially to people I don't actually know.

              1 Reply Last reply Reply Quote 0
              • K Offline
                kejianshi
                last edited by

                It would be sort of hard to pull a fast one with someone watching every move unless they didn't know anything about the box at all. :P

                1 Reply Last reply Reply Quote 0
                • S Offline
                  Supermule Banned
                  last edited by

                  Depending on the setup…. :)

                  I dont think it would be that timeconsuming. Maybe a couple of hours maximum.

                  1 Reply Last reply Reply Quote 0
                  • D Offline
                    Daniel.Rollins 0
                    last edited by

                    When would you be available to do a Team Viewer session and try to figure this out?

                    1 Reply Last reply Reply Quote 0
                    • S Offline
                      Supermule Banned
                      last edited by

                      What part of the world are you in Daniel?

                      1 Reply Last reply Reply Quote 0
                      • D Offline
                        Daniel.Rollins 0
                        last edited by

                        Utah (Mountain Time) Currently UTC-6.

                        1 Reply Last reply Reply Quote 0
                        • S Offline
                          Supermule Banned
                          last edited by

                          Perfect. Catch you on PM.

                          1 Reply Last reply Reply Quote 0
                          • S Offline
                            Supermule Banned
                            last edited by

                            Problem solved!

                            1 Reply Last reply Reply Quote 0
                            • K Offline
                              kejianshi
                              last edited by

                              I'm dying with curiosity - What was the problem?

                              1 Reply Last reply Reply Quote 0
                              • D Offline
                                Daniel.Rollins 0
                                last edited by

                                On the LAN interface configuration under Static IPV4 Configuration, the gateway should be set as none but I had it set to an internal address on my network. I guess it confused PFSense or something. The fix was to set the gateway back to "none".

                                Thanks to Supermule for solving that one!

                                1 Reply Last reply Reply Quote 0
                                • K Offline
                                  kejianshi
                                  last edited by

                                  Really?  I never would have guessed:

                                  Second page of thread, halfway down:

                                  "I've seen that gateways have been renamed or changed mysteriously upon upgrade by some.
                                  In one case it just killed his RRD data.

                                  In another case the gateway inserted its self into the openvpn and WAN firewall rules.

                                  Could some sort of gateway rename/change/insertion have happened to you?

                                  I'm reaching…"

                                  haha - But yeah.  I think supermule would have known it anyway.

                                  I'm going to put the words "please ignore this" at the bottom of all my posts from now on.    ;D

                                  1 Reply Last reply Reply Quote 0
                                  • S Offline
                                    Supermule Banned
                                    last edited by

                                    It was a pleasure working with Daniel and nice to meet a fellow pfsense'r!! :)

                                    1 Reply Last reply Reply Quote 0
                                    • D Offline
                                      Daniel.Rollins 0
                                      last edited by

                                      @kejianshi:

                                      Really?  I never would have guessed:

                                      Second page of thread, halfway down:

                                      "I've seen that gateways have been renamed or changed mysteriously upon upgrade by some.
                                      In one case it just killed his RRD data.

                                      In another case the gateway inserted its self into the openvpn and WAN firewall rules.

                                      Could some sort of gateway rename/change/insertion have happened to you?

                                      I'm reaching…"

                                      haha - But yeah.  I think supermule would have known it anyway.

                                      I'm going to put the words "please ignore this" at the bottom of all my posts from now on.    ;D

                                      Well, the difference is that it didn't somehow change during an upgrade or something, I set it that way thinking that was the way it was supposed to be set. I did pay attention to the above statement but when I checked the gateways everything was as I set it.

                                      1 Reply Last reply Reply Quote 0
                                      • K Offline
                                        kejianshi
                                        last edited by

                                        Haha - Just giving you minor crap…

                                        I can see that happening.  Just yesterday I didn't think I could effectively run several websites off my one IP and kurianoftheborge (or something like that) set me straight.  (At least I think so - haven't tried it yet).

                                        1 Reply Last reply Reply Quote 0
                                        • S Offline
                                          Supermule Banned
                                          last edited by

                                          Why cant you do that? Its either controlled through pfsense or the webserver delivering the sites :)

                                          1 Reply Last reply Reply Quote 0
                                          • K Offline
                                            kejianshi
                                            last edited by

                                            I'm not a website admin guy so yeah - Lets just say its new info to me.  I've not ever had a need for a reverse proxy, but if I did, clearly that would save me some $$$.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.