Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to connect external RDP server through pfsense

    Scheduled Pinned Locked Moved General pfSense Questions
    15 Posts 4 Posters 2.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kosala4
      last edited by

      Thanks steve,

      Yes by IP.
      I use default allow LAN to any rule.
      Squid with no transparent mood
      Port forwarding all http(80) traffic to my proxy port

      kosala

      1 Reply Last reply Reply Quote 0
      • K
        kathampy
        last edited by

        Does the RDP server have a route back to your client?

        1 Reply Last reply Reply Quote 0
        • K
          kosala4
          last edited by

          Yeah, I can connect it through a internet dongle..  :)

          1 Reply Last reply Reply Quote 0
          • K
            kathampy
            last edited by

            It needs a route back to the client through pfSense (assuming you're doing LAN to LAN routing - you're not being very clear).

            1 Reply Last reply Reply Quote 0
            • K
              kosala4
              last edited by

              Can you please tell me how to route bak.
              I'll attach screen shots of my current conf

              ![lan rules.png](/public/imported_attachments/1/lan rules.png)
              ![lan rules.png_thumb](/public/imported_attachments/1/lan rules.png_thumb)
              NAT.png
              NAT.png_thumb

              1 Reply Last reply Reply Quote 0
              • K
                kosala4
                last edited by

                My RDP server is on another country. so I access it through a public IP.
                I can ping to that ip through my pfsense. but I can't rdp to it.

                1 Reply Last reply Reply Quote 0
                • K
                  kejianshi
                  last edited by

                  172.16.1.1 is the private IP of the machine you wish to remote into or is that the IP of the distant pfsense LAN?

                  Also, are those rulees on your local pfsense or on the distant pfsense with the machine you wish to RDP into?

                  1 Reply Last reply Reply Quote 0
                  • K
                    kosala4
                    last edited by

                    no it's my local pfsense gateway.
                    should I use my private ip there

                    they are all my local pfsense configs.

                    1 Reply Last reply Reply Quote 0
                    • K
                      kejianshi
                      last edited by

                      Those port forwards need to be on you distant pfsense.  The pfsense that the machine you want to RDP into is on.
                      Also you need to be sure that the port forward is pointed to the private IP of the computer you wish to RDP into.

                      On your end, you just open your RDP client and enter the public IP of the far away pfsense.  Pfsense will forward to the IP of the computer running RDP.  Understand?

                      Your local pfsense needs NO special rules or port forwards.  Your pfsense should be "vanilla".  Just plain config.

                      Also, you probably don't want to proxy RDP traffic.  Just forward it directly to the computer/server you wish to remote into.

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Also you probably don't want to have http traffic forwarded to an internal proxy. That effectively creates a public proxy.

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • K
                          kejianshi
                          last edited by

                          Yep…  Unless you want to be famous for hacking...  haha

                          1 Reply Last reply Reply Quote 0
                          • K
                            kosala4
                            last edited by

                            Thanks kejianshi, Steve..
                            Yes you were right.. vanilla pf worked. So I factory reset my pf and tested. then I add my rules one by one without unnecessary rules  ;)

                            1 Reply Last reply Reply Quote 0
                            • K
                              kejianshi
                              last edited by

                              Cool - Glad its up.

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.