Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    What am I doing wrong? I don't see it (NAT/port fwd)

    Scheduled Pinned Locked Moved NAT
    20 Posts 4 Posters 4.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A Offline
      adegans
      last edited by

      According to webmin it's 10.0.0.1 (attached)
      Would that be it? If so, can I add a 2nd gateway or is there another trick to work around that?

      It's a Ubuntu 12.04 machine.

      ![Screen Shot 2013-11-21 at 22.23.48.png](/public/imported_attachments/1/Screen Shot 2013-11-21 at 22.23.48.png)
      ![Screen Shot 2013-11-21 at 22.23.48.png_thumb](/public/imported_attachments/1/Screen Shot 2013-11-21 at 22.23.48.png_thumb)

      1 Reply Last reply Reply Quote 0
      • johnpozJ Offline
        johnpoz LAYER 8 Global Moderator
        last edited by

        Why does your box have 2 networks attached?

        Why is it not just connected to your 10.0.1.0/24 network??

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • A Offline
          adegans
          last edited by

          Because there is another network coming in on the other interface, also with it's own wan… (Wan 1 & 2 - mentioned before) through another pfsense machine.

          1 Reply Last reply Reply Quote 0
          • johnpozJ Offline
            johnpoz LAYER 8 Global Moderator
            last edited by

            Sounds like one cluster of setup ;)

            I am at a loss to why you would have 4 internet connections in the first place..  But why would these 4 connections not being into 1 pfsense box.

            You have an asynchronous routing issue.  Yeah that is going to cause problems!

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • A Offline
              adegans
              last edited by

              It's not that complex actually, and everything works, except these 2 port forwards.
              So do you think its a gateway thing on the server itself? Or is something going wrong on the pfSense box?

              1 Reply Last reply Reply Quote 0
              • johnpozJ Offline
                johnpoz LAYER 8 Global Moderator
                last edited by

                Who said anything about complex, what I said was it sounds like a CLUSTER ;)

                Dude your issue is networking 101 - what do not understand about this issue?

                See the Pic

                asyncroute.jpg_thumb
                asyncroute.jpg

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • DerelictD Offline
                  Derelict LAYER 8 Netgate
                  last edited by

                  @adegans:

                  According to webmin it's 10.0.0.1 (attached)
                  Would that be it? If so, can I add a 2nd gateway or is there another trick to work around that?

                  It's a Ubuntu 12.04 machine.

                  According to your original post, your LAN is 10.0.1.0/24.  10.0.0.1 is not on that network, so it's broken.

                  No workaround necessary.  Proper configuration is what you need.

                  This really is drop-dead simple.  Multi-WAN complicates it some.  You might consider unplugging one of the WANs, starting from factory defaults on pfSense, until you get everything working - then worry about Multi-WAN.

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  1 Reply Last reply Reply Quote 0
                  • A Offline
                    adegans
                    last edited by

                    Derelict, I didn't think the other 'half' of my network was irrelevant to this issue.
                    But maybe it helps to know…

                    Because of some limitations I have/require 4 dsl connections to get a certain speed.
                    Because of me not paying attention when buying hardware I have 2 computers running Pfsense (instead of 1 with 7 NIC). Each has 2x WAN + the required Lans.

                    One Pfsense machine works, ports are forwarded and things go smooth.
                    The other Pfsense also works, but ports are not forwarded to 10.0.1.44.

                    The .44 machine is a Dell Poweredge with dual LAN. One interface is hooked up to the 10.0.0.0/24 subnet (10.0.0.44, gateway 10.0.0.1) and port forwards to that interface work fine, from that subnet.
                    The other interface, 10.0.1.44 also works, internally. But port forwards do not reach it.

                    Perhaps a simple gateway issue, but I'm not sure how to resolve that or even how to determine if it is. I'm no expert - As you may have guessed.

                    1 Reply Last reply Reply Quote 0
                    • A Offline
                      adegans
                      last edited by

                      Searching some more for a "dual gateway" setup on Ubuntu, this seems more trouble than it's worth.
                      I'm going to explore some other options.

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ Offline
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        "Because of some limitations I have/require 4 dsl connections to get a certain speed."

                        And how are you getting a certain speed when they are connected to 2 different machines?  You sure and the hell are not bonding them, you can not even be doing load balancing over the 4.  So certain speed - no..  Bandwidth ok, but you would have to distribute what your doing over 4 different connections manually, etc.  So there is no possible way your fully utilizing the bandwdith you have available.

                        So your telling me there is no other connection options other than really slow dsl?  Come on, nonsense.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • A Offline
                          adegans
                          last edited by

                          @johnpoz:

                          "Because of some limitations I have/require 4 dsl connections to get a certain speed."

                          And how are you getting a certain speed when they are connected to 2 different machines?  You sure and the hell are not bonding them, you can not even be doing load balancing over the 4.  So certain speed - no..  Bandwidth ok, but you would have to distribute what your doing over 4 different connections manually, etc.  So there is no possible way your fully utilizing the bandwdith you have available.

                          So your telling me there is no other connection options other than really slow dsl?  Come on, nonsense.

                          Why are you questioning me having 4 dsl connections when you know nothing about what ISPs have to offer here?
                          If I want to use 2 connections on each pfSense machine that's my business and does not apply/relate to my original question.

                          If you are quite done going off-topic, can we get back to my original question? Which is forwarding 2 ports…
                          As you suggested, this may be a gateway issue on the receiving server. I've looked into that, turns out it's a lot of trouble so I'm exploring some other options now. If you have other useful input, feel free to share.

                          1 Reply Last reply Reply Quote 0
                          • DerelictD Offline
                            Derelict LAYER 8 Netgate
                            last edited by

                            As was already pointed out, I'll bet the forwards are reaching the machine in question, but the REPLIES (SYNACKS, ACKS) are being routed somewhere goofy so the TCP connection is not coming up.  You will want to get to know a tool such as wireshark.

                            Like I said, I would SIMPLIFY your setup (ONE WAN, ONE LAN), which will prove the problem is not with pfSense and its port forwarding.

                            Having one machine on two LANs is almost never a good idea.

                            Chattanooga, Tennessee, USA
                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ Offline
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              "Why are you questioning me having 4 dsl connections when you know nothing about what ISPs have to offer here?"

                              Because I work for a large IT Services company - and don't buy slow ass dsl being the only option.  Are you in the middle of nowhere?  And if you actually needing a specific speed, how you are doing it is NOT the correct way to go about getting it ;)

                              We have already solved your issue - and as typical it had nothing to do with any sort of issue with pfsense, just lack of understanding basic networking ;)

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.