Portforward 1 private ip to 2 different WAN
-
Hi,
I have 2 different WAN and i want to portforward 123 from local IP 192.168.1.2 to 2 different WAN.
Local IP: 192.168.1.2:123
port forward to 2 different WAN: X.X.X.X: 123 and Y.Y.Y.Y:123
Is this possible? will i face any issue if i use this kind of setup?
Newbie
-
Sure thing, Dr. Quantum can do that.
-
Are you talking about connections into each WAN going to the same internal host and port?
Just make two port forwards.
-
Yes, From 2 different WAN/ISP going to the same internal host and port. will i encounter some issues in doing this setup?
Was ther any special settings for this one in port forwarding configurations or such?
-
Two port forwards, with firewall rules (automatic) on each WAN. The internal host doesn't care what outside IP the request came from. As far as I know pfSense and reply-to will keep everything straight on the way back. Try it and see.
-
So you want your ntp server (port 123 or was that just example?) open on 2 different wan IPs.. While it should work, not really understanding the reason why want/need to do something like that. Why is 1 not enough for users on public internet to get too?
-
If you have multi-WAN and it fails over and dyndns changes to your tier 2 you need a port forward there too.
-
will i face any issue if i use this kind of setup?
Unless that port 123 was just an example: yeah, the main issue you will face soon will be a nifty DDoS amplification attack.
-
Thanks for inputs guys. another thing how can i secure the port forwarding in pf like on specific IP's or domain allowed to connect to it?
-
Source addresses on the WAN rules.
-
guys,
Now i tried the portforwading but it did not work. Please help
setup
No RDR (NOT) > uncheck
Interface > Wan
Protocol > tcp
Source > left blank
Destination > Wan adress
Destination port range > 80 to 82
Redirect target IP > 192.x.x.2
Redirect target port > http
Description > test
No XMLRPC Sync > ucheck
NAT reflection > USe system default
Filter rule association > Rule Nat testFirewall Rules:
TCP * * 192.x.x.2 80-82 * nonepf Version: 2.2.4-RELEASE (amd64) ..
I access it by publicip:81 or just publicip. I even change Destination from Wan address to Lan address but to no avail.
-
Access it from where?
Good list of things to check here:
https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting