• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Port forward plex

Firewalling
4
25
2.6k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • G
    Grimson Banned
    last edited by May 14, 2018, 4:03 PM

    https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting

    1 Reply Last reply Reply Quote 0
    • J
      johnpoz LAYER 8 Global Moderator
      last edited by May 14, 2018, 5:31 PM

      "with forwarding the ports for each."

      Why don't you do that vs the UPnP nonsense?

      You could have as many plex boxes as you want behind your nat… Just forward whatever port you want to use on the outside to the IP:32400 for that different plex box.

      Setup in each plex the manual port forwarding your using calling out your public port your using..

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

      1 Reply Last reply Reply Quote 0
      • S
        sakn1954
        last edited by May 14, 2018, 5:41 PM

        I am trying to that with my movies plex server. do I have to turn off upnp also.

        1 Reply Last reply Reply Quote 0
        • J
          johnpoz LAYER 8 Global Moderator
          last edited by May 14, 2018, 5:47 PM

          Plex does not allow for both UPnP and manual - does it… Would make ZERO sense if it did..

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

          1 Reply Last reply Reply Quote 0
          • S
            sakn1954
            last edited by May 17, 2018, 6:42 PM

            I read the instructions on how to port forward, I am including 2 screen shots. 1 for customplugin and 1 for Sophia. Sophia is working fine outside the network, but customplugin is not. can someone tell me what i am doing wrong.

            ![Screenshot (19).png](/public/imported_attachments/1/Screenshot (19).png)
            ![Screenshot (19).png_thumb](/public/imported_attachments/1/Screenshot (19).png_thumb)
            ![Screenshot (20).png](/public/imported_attachments/1/Screenshot (20).png)
            ![Screenshot (20).png_thumb](/public/imported_attachments/1/Screenshot (20).png_thumb)

            1 Reply Last reply Reply Quote 0
            • J
              johnpoz LAYER 8 Global Moderator
              last edited by May 17, 2018, 6:54 PM

              Lets see your wan rules.

              So when you go to canyouseeme org and check for port 45500 does it come back.

              Did you go through the port forward troubleshooting guide?  Maybe traffic never gets to pfsense? etc..

              https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.7.2, 24.11

              1 Reply Last reply Reply Quote 0
              • S
                sakn1954
                last edited by May 17, 2018, 7:55 PM

                I went to canuseeme.org, and i got an error. The funny thing is why does the sophia server work outside the network, and customplugin_1 does not. I have an ATT  5268AC using DMZ to the pfsense router. The router to a switch to the servers. I also have an Asus rt68u-ac in ap mode for wireless. When I used the asus as the main router the plex servers worked outside the network all the time with port forwarding.I am sending the plex screenshots

                ![Screenshot (21)b.jpg](/public/imported_attachments/1/Screenshot (21)b.jpg)
                ![Screenshot (21)b.jpg_thumb](/public/imported_attachments/1/Screenshot (21)b.jpg_thumb)
                ![Screenshot (22)b.jpg](/public/imported_attachments/1/Screenshot (22)b.jpg)
                ![Screenshot (22)b.jpg_thumb](/public/imported_attachments/1/Screenshot (22)b.jpg_thumb)

                1 Reply Last reply Reply Quote 0
                • S
                  sakn1954
                  last edited by May 17, 2018, 7:59 PM

                  I am lost, here is the screen from canuseeme

                  ![Screenshot (23).png](/public/imported_attachments/1/Screenshot (23).png)
                  ![Screenshot (23).png_thumb](/public/imported_attachments/1/Screenshot (23).png_thumb)

                  1 Reply Last reply Reply Quote 0
                  • J
                    johnpoz LAYER 8 Global Moderator
                    last edited by May 17, 2018, 8:25 PM

                    where are your wan rules?

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                    1 Reply Last reply Reply Quote 0
                    • S
                      sakn1954
                      last edited by May 17, 2018, 8:34 PM

                      here are the rules

                      ![Screenshot (24).png](/public/imported_attachments/1/Screenshot (24).png)
                      ![Screenshot (24).png_thumb](/public/imported_attachments/1/Screenshot (24).png_thumb)
                      ![Screenshot (25).png](/public/imported_attachments/1/Screenshot (25).png)
                      ![Screenshot (25).png_thumb](/public/imported_attachments/1/Screenshot (25).png_thumb)
                      ![Screenshot (26).png](/public/imported_attachments/1/Screenshot (26).png)
                      ![Screenshot (26).png_thumb](/public/imported_attachments/1/Screenshot (26).png_thumb)

                      1 Reply Last reply Reply Quote 0
                      • S
                        sakn1954
                        last edited by May 17, 2018, 8:50 PM

                        2 more screens

                        ![Screenshot (27).png](/public/imported_attachments/1/Screenshot (27).png)
                        ![Screenshot (27).png_thumb](/public/imported_attachments/1/Screenshot (27).png_thumb)
                        ![Screenshot (28).png](/public/imported_attachments/1/Screenshot (28).png)
                        ![Screenshot (28).png_thumb](/public/imported_attachments/1/Screenshot (28).png_thumb)

                        1 Reply Last reply Reply Quote 0
                        • J
                          johnpoz LAYER 8 Global Moderator
                          last edited by May 18, 2018, 1:21 AM

                          What?  Dude show me your wan rules… Like this!

                          wanrules.png
                          wanrules.png_thumb

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                          1 Reply Last reply Reply Quote 0
                          • S
                            sakn1954
                            last edited by May 18, 2018, 1:27 AM

                            I hope this is it

                            ![Screenshot (29).png](/public/imported_attachments/1/Screenshot (29).png)
                            ![Screenshot (29).png_thumb](/public/imported_attachments/1/Screenshot (29).png_thumb)

                            1 Reply Last reply Reply Quote 0
                            • J
                              johnpoz LAYER 8 Global Moderator
                              last edited by May 18, 2018, 9:25 AM

                              Why in the world do you have an ANY ANY rule on your wan???  Remove that!!!

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                              1 Reply Last reply Reply Quote 0
                              • S
                                sakn1954
                                last edited by May 18, 2018, 10:32 AM

                                sorry, don't understand. Do I remove any from the rule and what do i replace with. Can you please show me an example

                                1 Reply Last reply Reply Quote 0
                                • J
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by May 18, 2018, 10:36 AM

                                  Dude Delete the ANY ANY rule you have on the top - Why would you have that??

                                  delete.png
                                  delete.png_thumb

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    sakn1954
                                    last edited by May 18, 2018, 11:10 AM

                                    deleted it, but still no access outside of network for custom, Sophia has no problem. Can,t figure this one.

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      sakn1954
                                      last edited by May 18, 2018, 12:36 PM

                                      Does the ATT 5268AC router modem have anything to do with this. I am using dmz to the pfsense router, and the pfsense to a switch.

                                      1 Reply Last reply Reply Quote 0
                                      • J
                                        johnpoz LAYER 8 Global Moderator
                                        last edited by May 18, 2018, 12:52 PM

                                        Lets see your port forward tab..

                                        If can you see me org shows that it can not talk to your plex then no it will not work… So you need to go through the troubleshooting guide I linked too and figure out why.

                                        First step is to make sure the traffic even gets to pfsense, simple package capture on wan interface while you run your can you see me org test.

                                        If that is there, then packet capture on the lan interface - does pfsense send the traffic on?  If so then the problem lays with the plex box.  Maybe its not actually listening on 32400, maybe there is a firewall, maybe it doesn't point back to pfsense as its gateway? etc..

                                        It really should take only a couple of minutes to determine where the problem is.

                                        So I added a port forward for 45500 to my plex box on 34200... I then go to can you see me..  Run the test, while I repeat this test I sniff on both the wan interface and the lan interface.

                                        As you can see in my case even on the wan sniff I can see replies..  But lets assume it didn't show any responses but I did see the traffic to my wan IP on port 45500, I would then sniff on the interface the server I am forwarding to on (lan in my case) and see if pfsense send on the data to 192.168.9.10 - which it does in my case.  But lets say I didn't see any response from 192.168.9.10.. If that is the case then it SCREAMS something wrong on that box.

                                        Be it wrong IP for plex, firewall on the plex box.  Plex not listening on that port, etc.  If you do not see pfsense sending to 192.168.9.10 in my case.  Maybe there is no machine on that IP?  And pfsense can not arp for it - can you ping that IP from pfsense? etc..

                                        Pretty much every possible scenario is gone over in the troubleshooting doc..  If you have questions on how to do something specific in that doc then please ask.  But the attached walks you through very simple method of traffic down where the problem is.  First thing to always validate is the traffic actually gets to pfsense.

                                        Hope that helps..  If you want - if this is confusing.. Later today we could do a teamviewer and I could take a look remotely.

                                        simpleportforwardcheck.png
                                        simpleportforwardcheck.png_thumb

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          MoonKnight
                                          last edited by May 18, 2018, 6:27 PM

                                          @johnpoz
                                          I'm just curious, in you firewall rules, WAN.You have one rule at the bottom. You call it "Clean Block" Do you like to share the settings you have inside that rule?

                                          Thanks in advance!

                                          --- 24.11 ---
                                          Intel(R) Xeon(R) CPU D-1518 @ 2.20GHz
                                          Kingston DDR4 2666MHz 16GB ECC
                                          2 x HyperX Fury SSD 120GB (ZFS-mirror)
                                          2 x Intel i210 (ports)
                                          4 x Intel i350 (ports)

                                          1 Reply Last reply Reply Quote 0
                                          11 out of 25
                                          • First post
                                            11/25
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.