Forwarding ports?

killmasta93

So here my setup the 192.168.1.1 is completely separate and has no contact with pfSense. Later tonight i will send the information

Thank you

Drawing1.png_thumb

killmasta93

hi so heres the screen shot of the ports
Im just curious why it does not work for 8080 when i can forward on pfSense port 80 and 443 with no problem

Thank you

Capture.PNG_thumb

Capture2.PNG_thumb

johnpoz

So what does a sniff show on the lan of pfsense - does it show it sending the traffic? Does dd-wrt answer? Looks like not answering to me.

killmasta93

o snap i think your right..i just tried port 22 i unchecked pfSense ssh to test the port then I tick ssh then open the port it worked. Hmm…howcome ddwrt not answering? well..worst case just create a vpn and connect to ddwrt

THANKS :)

cmb

The connections are in time wait, which means they were successful at the TCP level bidirectionally, so your port forwards are fine. I presume that's the web interface of the DDWRT, what did you see in a browser trying to browse to :8080 on your IP from outside?

killmasta93

i think i need to play with some iptables in ddwrt to make it listen on that port because WAN is disabled on ddwrt

killmasta93

o snap…port 80 is also ddwrt internally and 8080 wont work because its for the WAN and its disabled.

My 2 options are:

Change port 80 on pfSense which I really dont want to
or
find a way to change port 80 on ddwrt
OR
is it possible two devices running on the same port (80) be able to port forward (maybe crazy idea) :P

Thanks

doktornotor

There's really nothing preventing you from forwarding 8080 -> 80 or whatever. As a generic note, you'd better get HTTPS working everywhere. Sorry but sending firewall/router credentials in plaintext over internet is a very bad practice.

johnpoz

Why anyone would allow public access to their admin gui of anything is beyond me.. If you want to admin dd-wrt while your remote then vpn into pfsense and do it that way. Then you don't have to forward anything either ;) This is way MORE secure..

killmasta93

Thanks johnpoz and doktornotor your completely right. Its better though VPN i guess i got used to ddwrt for a while didn't want to let it go. :P Just trying to adapt more to pfSense now :)

Thank you again