Seeking Assistance creating firewall rules..

skylab · May 4, 2017, 3:32 PM

Hello everyone, i'm seeking some assistance, i've created an installation of pfsense as show in the follow map http://i.imgur.com/9ItpOzj.jpg

i have a domain registered www.website.xx (not the realone) and i have a wordpress blog running on the webserver in the dmz
i would like to route all traffic from www.website.xx to the webserver in the dmz at 192.168.50.10, how ever when i select
to forward traffic to dmz address it's ghosted and i cannot enter an address, this is only available if i select Single address or alias
my rule was created as follows

Action: Pass / Interface:WAN/ Address Fam: IPv4 /Protocol:TCP/
Source: Wan net - Port (http(80) / Destination: DMZ Address - 192.168.50.10 /

that's it and nothing happens when i try to access the site.. Can i get some guidance please..

johnpoz · May 4, 2017, 4:09 PM

"when i select to forward traffic to dmz address it's ghosted and i cannot enter an address"

Why would you forward to pfsense IP address of the DMZ? You would want to forard your server running in the dmz, which I take is this 192.168.50.10 address.. So yeah that would be a single address or alias.

skylab · May 4, 2017, 4:14 PM

No. i"m attempting to forward all http traffic from the WAN through to the Webserver in the DMZ..
so are you saying i need to do the rule from the other way ect from DMZ to WAN?

johnpoz · May 4, 2017, 5:20 PM

Dude port forwarding port 80/443, ie web services is like 2 seconds. Create your simple port forward.. What are you not understanding? Dest would be your WAN address, dest would be the webserver IP.. 192.168.50.10 in your case?

For a port 80 port forward that are exactly 3 box you have to hit on the port forward, all the other is default. The port, the IP and the port again.

And then hit save. If this takes you more than 2 seconds your overthinking it or doing something wrong. If it doesn't work then go through the troubleshooting guide. Is the port your trying to forward even getting to pfsense wan IP? Is the place your forwarding it to running a firewall?

https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting

skylab · May 4, 2017, 8:54 PM

Thanks for you assistance, but there was nothing labeled port forwarding in the menus, but i found what you're referring to
i'm new to this product and i was trying to do it with a rule.. but thanks again..

johnpoz · May 4, 2017, 11:16 PM

Well port forwarding is sub of NAT.. So yeah you have to look there ;)