• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Port Forwarding Trouble - Rules Ignored

Scheduled Pinned Locked Moved NAT
2 Posts 2 Posters 903 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • P
    parkwaypaul
    last edited by May 14, 2014, 4:03 AM

    Thanking in advance, I am not a tech guy - I'm a lawyer running a small law office who is fascinated by open source software.

    I have installed pfsense on a Dell server and configured it with a static IP on the WAN interface - no trouble there. The Verizon DSL modem is bridged.

    The LAN seems fine and I have an Asterisk box and several SIP phones on the LAN - no trouble there, either. Outbound traffic is fine and internet access is good across about 15 nodes.

    I signed up for a SIP termination provider and to accomplish this, I forwarded the SIP and RTP ports to the Asterisk box (or so I thought, anyway).  PASS rule on the WAN interface, no source port specified, the Asterisk box IP selected as a "Single Host" with the proper destination ports identified.

    No dice - pfsense is blocking the incoming SIP traffic on a default deny rule despite the forwarding rules.  I've tried deleting all the rules and rewriting them several times - same thing - default deny rule blocks traffic. I tried out another SIP provider, and got the same result.  All the inbound traffic is  being blocked by the default rule:

    "@3 block drop in log inet all label "Default deny rule IPv4"

    For the record, I have SIP ports 5060-5080 (UDP and TCP) and RTP ports 10000-20000 (UDP and TCP) forwarded to the Asterisk box and have verified the information is correct in the Rules.  I tried using the "Wan Address" for the destination and also tried using a "Single Host" - no difference.  I tried the floating rules, too.  No good.

    I set up a pfsense box at my old office about 7 years ago and had no trouble at all.

    Does anyone know what I'm doing wrong now?

    1 Reply Last reply Reply Quote 0
    • J
      johnpoz LAYER 8 Global Moderator
      last edited by May 15, 2014, 8:39 PM

      You are trying to create the wan rules on your own vs letting the forward create them for you?

      Post your wan rules and your port forwards.

      Port forwards are really click click - just let, which is the default the port forward create the wan rule for you automatically.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      2 out of 2
      • First post
        2/2
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
        This community forum collects and processes your personal information.
        consent.not_received