Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    I can't seem to port forward my minecraft server

    Firewalling
    3
    13
    5.7k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DerelictD
      Derelict LAYER 8 Netgate
      last edited by

      What are the first two numbers in your IPv4 Address on WAN in Status > Interfaces? If it says 209.221.244.23, I'mm looking for 209.221.X.X

      Delete everything you have done. All pertinent rules in Firewall > NAT, Port Forwards and in Firewall > Rules, WAN

      Do this in Firewall > NAT, Port Forwards:

      Interface -  WAN
      Protocol - TCP/UDP TCP
      Destination - WAN address
      Destination port range - 25565, 25565
      Redirect target IP - 192.168.1.100
      Redirect target port - 25565
      Description - Minecraft
      No XMLRPC Sync - (Unchecked)
      NAT Reflection - System defaults
      Filter rule association - Pass Add associated filter rule

      As far as I know, Minecraft is TCP-Only.

      There really isn't anything else to do. You are going to have to learn all of those things in the list one by one until you fix it if that doesn't work. Nobody else can do it for you.

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      1 Reply Last reply Reply Quote 0
      • N
        nikhilooga
        last edited by

        Okay, my WAN IPv4 Address is 192.168.x.x. If you wanted my IP address, its 67.254.x.x. I didn't see my public IP address anywhere on the page. Is this a problem? I did notice, however, that my default gateway is not the same IP address as the WAN ipv4 address. Is this a problem?

        Also, I made the edits that you said, but I'm 99% sure that Minecraft uses TCP and UDP. I made one port forward for MinecraftTCP and one for MinecraftUDP. Will that effect anything?

        By the way, the Redirect target IP is the IP address of the PC running the minecraft server, right?

        Thanks so much for your help so far!

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          Something upstream is forwarding traffic to pfSense. Some mechanism for forwarding the traffic from there to pfSense will need to be done.

          #5 and/or 8 on the prior list.

          What is your pfSense WAN connected to?

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • D
            DanC
            last edited by

            As Derelict said - seems like your modem is not in bridge mode if you're getting a private IP address on your WAN interface.  If you're getting anything that's 192.168./16, 172.16./12 or 10./8 on WAN interface then you're double NAT'd behind pfSense.

            Solve the upstream first, then start working on pfSense.  There are a bunch of tutorials online to put your modem in bridge mode.

            1 Reply Last reply Reply Quote 0
            • N
              nikhilooga
              last edited by

              Sorry, I forgot to mention this. I do not have a wifi card installed on my pfsense box, so I have the modem not bridged because I need the wifi from it. I still have my Apple Airport Extreme router. Could I use this to have wifi? In other words, could I somehow bridge my modem, have the modem > pfsense box > switch > airport router? Would I be able to get wifi off that? Do I need to bridge the modem and get a wifi card for my pfsense box? If I don't bridge the modem, will it effect anything else?

              Thanks!

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                Good luck. Put your wireless behind pfSense. If you can't do it with the ISP modem do it with something else.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • D
                  DanC
                  last edited by

                  Bridged Modem > pfSense > Switch > Access Point, Servers, etc

                  Port forwards will never work how you have it currently set up.  Gotta fix those issues first.

                  Using an existing router (like an AirPort) as an access point is possible, but not really recommended.  I'd go so far as to say that installing a wireless card in pfSense is a bad idea.  Either way, these have to be behind pfSense.  You can't use your Modem as your access point.

                  This has deviated a bit off topic from firewalling, so I'd suggest opening a new thread in hardware if you need more advice on what devices to use for wifi. (Short answer - get an access point)

                  1 Reply Last reply Reply Quote 0
                  • N
                    nikhilooga
                    last edited by

                    Okay, thanks so much to everyone who has contributed in this thread!

                    1 Reply Last reply Reply Quote 0
                    • N
                      nikhilooga
                      last edited by

                      Hey guys, I know I said that I moved this thread, but I think it's still relevant to firewalling now. I have unbridged my modem successfully, and I'm just gonna buy a powerline adapter.

                      The problem is as follows: when I use a port checker, it says that port 25565 is open. When I try to connect via minecraft, I can't connect. When I try connecting to 192.168.1.100, it works just fine.

                      I have not yet asked a friend to connect to the server, so I do not know if people outside of my network can connect.

                      Any help would be so much appreciated!

                      (sorry again for kinda re-opening this thread)

                      1 Reply Last reply Reply Quote 0
                      • DerelictD
                        Derelict LAYER 8 Netgate
                        last edited by

                        #6 on the list.

                        If you want to use it from the inside on the outside IP address you need to enable NAT reflection.

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.