Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Simple port forwarding

    Scheduled Pinned Locked Moved General pfSense Questions
    19 Posts 7 Posters 6.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Stugots
      last edited by

      You have to create a corresponding rule on your WAN interface to allow the inbound traffic.

      PC Engines APU2C4

      1 Reply Last reply Reply Quote 0
      • T
        tushar
        last edited by

        @johnpoz:

        how are you testing that is working or not?

        Did you look at the troubleshooting doc?
        https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting

        First trying to access from WAN side second http://www.yougetsignal.com/tools/open-ports/

        is my settings are ok for forwarding port 8000

        ![Screen Shot 2016-10-11 at 10.31.50 PM.png](/public/imported_attachments/1/Screen Shot 2016-10-11 at 10.31.50 PM.png)
        ![Screen Shot 2016-10-11 at 10.31.50 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2016-10-11 at 10.31.50 PM.png_thumb)

        1 Reply Last reply Reply Quote 0
        • S
          Stugots
          last edited by

          Can you see the traffic being dropped in the firewall log?

          PC Engines APU2C4

          1 Reply Last reply Reply Quote 0
          • T
            tushar
            last edited by

            @acascianelli:

            Can you see the traffic being dropped in the firewall log?

            There is no such log related to port 8000 nothing..

            1 Reply Last reply Reply Quote 0
            • S
              Stugots
              last edited by

              Status > System Logs > Firewall

              Just tested this myself against my own IP address and a known closed port, I see the block attempt just fine in the logs.  Are you sure you're testing against the correct internet IP?  I'm not trying to insult you, just a simple mistake.

              PC Engines APU2C4

              1 Reply Last reply Reply Quote 0
              • T
                tushar
                last edited by

                @acascianelli:

                Status > System Logs > Firewall

                Just tested this myself against my own IP address and a known closed port, I see the block attempt just fine in the logs.  Are you sure you're testing against the correct internet IP?  I'm not trying to insult you, just a simple mistake.

                yes nothing even i tried to open WEB GUI port 80 showing closed http://www.yougetsignal.com/tools/open-ports/

                screenshot-192.168.1.1-2016-10-12-01-04-12.png
                screenshot-192.168.1.1-2016-10-12-01-04-12.png_thumb
                screenshot-192.168.1.1-2016-10-12-01-05-48.png
                screenshot-192.168.1.1-2016-10-12-01-05-48.png_thumb
                ![Screen Shot 2016-10-12 at 1.06.14 AM.png](/public/imported_attachments/1/Screen Shot 2016-10-12 at 1.06.14 AM.png)
                ![Screen Shot 2016-10-12 at 1.06.14 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2016-10-12 at 1.06.14 AM.png_thumb)

                1 Reply Last reply Reply Quote 0
                • K
                  kpa
                  last edited by

                  There's a vital piece of information missing here. Is your pfSense behind another NAT router?

                  1 Reply Last reply Reply Quote 0
                  • H
                    heper
                    last edited by

                    or is you isp actively blocking inbound traffic?

                    1 Reply Last reply Reply Quote 0
                    • T
                      tushar
                      last edited by

                      no no nothing blocked my pfsense connected to via isp provided cable modem and pppoe congigured on

                      am i doing correct port forwarding?

                      using pfblockerng and squid proxy transparent mode…

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        well if you have a pppoe interface your interface for the forward wold be the pppoe interface

                        I would not suggest you open up webgui to the public internet that is for sure.  If your not seeing traffic to your IP then its not getting to pfsense, so pfsense could never forward it.

                        You have rules above your wan rule that blocks pfblocker lists, so that could be blocking it?

                        So your cable modem is doing the pppoe?  And pfsense just gets a public IP on its wan interface connect to your isp device.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • T
                          tushar
                          last edited by

                          @johnpoz:

                          well if you have a pppoe interface your interface for the forward wold be the pppoe interface

                          I would not suggest you open up webgui to the public internet that is for sure.  If your not seeing traffic to your IP then its not getting to pfsense, so pfsense could never forward it.

                          You have rules above your wan rule that blocks pfblocker lists, so that could be blocking it?

                          So your cable modem is doing the pppoe?  And pfsense just gets a public IP on its wan interface connect to your isp device.

                          i configured pppoe in pfsense, isp cable modem working as bridging doing nothing just act as MODEM

                          just enabling web gui remote access to test

                          1 Reply Last reply Reply Quote 0
                          • S
                            Stugots
                            last edited by

                            What country are you in?  I don't know if any US cable providers that use PPPoE anymore.

                            PC Engines APU2C4

                            1 Reply Last reply Reply Quote 0
                            • T
                              tushar
                              last edited by

                              @acascianelli:

                              What country are you in?  I don't know if any US cable providers that use PPPoE anymore.

                              pppoe in india

                              1 Reply Last reply Reply Quote 0
                              • T
                                tushar
                                last edited by

                                ok after doing long searching googling success forwarded port 8000 and 8008 but failed for port 80 tried many times nothing happened. May be due to pfblockerNG doing something math with it so i decided to change http port for my DVR 80 to 8008. (BTW i changed pfsense webgui http port 80 before using port 80 for DVR).

                                If anyone know about port 80 whats wrong please update.

                                On my ios device App for my CCTV camera not working even forwarding port http 8000, so i tried with my trusty android and valla it worked. :)  ios you traitor wasted my 2 hours :(

                                Why i seeing outbound Mapping dim rules can i delete all these?

                                Thanks  acascianelli johnpoz heper kpa

                                ![Screen Shot 2016-10-12 at 10.10.28 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2016-10-12 at 10.10.28 PM.png_thumb)
                                ![Screen Shot 2016-10-12 at 10.10.28 PM.png](/public/imported_attachments/1/Screen Shot 2016-10-12 at 10.10.28 PM.png)
                                ![Screen Shot 2016-10-12 at 10.09.01 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2016-10-12 at 10.09.01 PM.png_thumb)
                                ![Screen Shot 2016-10-12 at 10.09.01 PM.png](/public/imported_attachments/1/Screen Shot 2016-10-12 at 10.09.01 PM.png)
                                screenshot-192.168.1.1-2016-10-12-22-09-29.png
                                screenshot-192.168.1.1-2016-10-12-22-09-29.png_thumb

                                1 Reply Last reply Reply Quote 0
                                • KOMK
                                  KOM
                                  last edited by

                                  If anyone know about port 80 whats wrong please update.

                                  Are you running WebGUI in HTTP mode?…

                                  1 Reply Last reply Reply Quote 0
                                  • DerelictD
                                    Derelict LAYER 8 Netgate
                                    last edited by

                                    Why is the destination address on your 8008 port forward not WAN address?

                                    The answer is probably here:

                                    https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting

                                    Check the default gateway on the 8008 DVR.

                                    Chattanooga, Tennessee, USA
                                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                    1 Reply Last reply Reply Quote 0
                                    • T
                                      tushar
                                      last edited by

                                      @KOM:

                                      If anyone know about port 80 whats wrong please update.

                                      Are you running WebGUI in HTTP mode?…

                                      yes sir running pfsense web gui on http port 80 but trying to forward port 80 no success :(

                                      **Why is the destination address on your 8008 port forward not WAN address?

                                      @Derelict ok sir i changed it to Wan Addres**

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.