Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to connect external RDP server through pfsense

    Scheduled Pinned Locked Moved General pfSense Questions
    15 Posts 4 Posters 2.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kosala4
      last edited by

      Yeah, I can connect it through a internet dongle..  :)

      1 Reply Last reply Reply Quote 0
      • K
        kathampy
        last edited by

        It needs a route back to the client through pfSense (assuming you're doing LAN to LAN routing - you're not being very clear).

        1 Reply Last reply Reply Quote 0
        • K
          kosala4
          last edited by

          Can you please tell me how to route bak.
          I'll attach screen shots of my current conf

          ![lan rules.png](/public/imported_attachments/1/lan rules.png)
          ![lan rules.png_thumb](/public/imported_attachments/1/lan rules.png_thumb)
          NAT.png
          NAT.png_thumb

          1 Reply Last reply Reply Quote 0
          • K
            kosala4
            last edited by

            My RDP server is on another country. so I access it through a public IP.
            I can ping to that ip through my pfsense. but I can't rdp to it.

            1 Reply Last reply Reply Quote 0
            • K
              kejianshi
              last edited by

              172.16.1.1 is the private IP of the machine you wish to remote into or is that the IP of the distant pfsense LAN?

              Also, are those rulees on your local pfsense or on the distant pfsense with the machine you wish to RDP into?

              1 Reply Last reply Reply Quote 0
              • K
                kosala4
                last edited by

                no it's my local pfsense gateway.
                should I use my private ip there

                they are all my local pfsense configs.

                1 Reply Last reply Reply Quote 0
                • K
                  kejianshi
                  last edited by

                  Those port forwards need to be on you distant pfsense.  The pfsense that the machine you want to RDP into is on.
                  Also you need to be sure that the port forward is pointed to the private IP of the computer you wish to RDP into.

                  On your end, you just open your RDP client and enter the public IP of the far away pfsense.  Pfsense will forward to the IP of the computer running RDP.  Understand?

                  Your local pfsense needs NO special rules or port forwards.  Your pfsense should be "vanilla".  Just plain config.

                  Also, you probably don't want to proxy RDP traffic.  Just forward it directly to the computer/server you wish to remote into.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Also you probably don't want to have http traffic forwarded to an internal proxy. That effectively creates a public proxy.

                    Steve

                    1 Reply Last reply Reply Quote 0
                    • K
                      kejianshi
                      last edited by

                      Yep…  Unless you want to be famous for hacking...  haha

                      1 Reply Last reply Reply Quote 0
                      • K
                        kosala4
                        last edited by

                        Thanks kejianshi, Steve..
                        Yes you were right.. vanilla pf worked. So I factory reset my pf and tested. then I add my rules one by one without unnecessary rules  ;)

                        1 Reply Last reply Reply Quote 0
                        • K
                          kejianshi
                          last edited by

                          Cool - Glad its up.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.