Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Https NAT not working

    Scheduled Pinned Locked Moved NAT
    22 Posts 3 Posters 4.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      khansen
      last edited by

      And it was also a fresh apache2 install and it gave no errors when starting, just a little more info..

      1 Reply Last reply Reply Quote 0
      • N
        NOYB
        last edited by

        If web server is configured to listen on 444 then the 443 rule is not going to work.

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          You could port forward from 443 to 444 though.

          Set the dest port to 443 and the NAT port to 444.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • K
            khansen
            last edited by

            @Derelict:

            You could port forward from 443 to 444 though.

            Set the dest port to 443 and the NAT port to 444.

            Tried this and 'site cant be reached'  'err_connection_timed_out'

            1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              That will only work if your TLS web server is listening on 444. Only you know what's going on on your network/servers.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • K
                khansen
                last edited by

                From local network

                pf6.JPG
                pf6.JPG_thumb

                1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by

                  Then I guess you need to figure out why connections from outside aren't completing. Packet capture on LAN port 444 and post.

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  1 Reply Last reply Reply Quote 0
                  • K
                    khansen
                    last edited by

                    Solved !!
                    Well not really but after 2 hours of tcpdump and no traffic ever reaching port 443, I decided to look at the trusty Uverse gateway for info I saw that it has port 443 used for the WAP if you have any wireless receivers, and then a quick little google turned up the the same from ATT.

                    After redoing the NAT on 444 to 444 the webserver does work.
                    Not an ideal solution, but its all I have now.

                    Thank you to everyone that responded.

                    pf11.JPG
                    pf11.JPG_thumb
                    pf12.JPG
                    pf12.JPG_thumb

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      #5 on this list: https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • K
                        khansen
                        last edited by

                        @Derelict:

                        #5 on this list: https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting

                        Agreed, I just never thought it would be used by them for device control and I haven't always had the wireless receivers, and 443 has worked for me in the past.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.