Can't reach internal web server

fendy

@derelict how do i do that?

this is my NAT config right now :

System - Firewall / NAT:
Network Address Translation
NAT Reflection mode for port forwards: Enable (Pure NAT)
Reflection Timeout: (not specified)
Enable NAT Reflection for 1:1 NAT: Disabled (box NOT checked)
Enable automatic outbound NAT for Reflection: Enabled (box checked)
TFTP Proxy: (not specified)

Derelict

Post a screen shot of your port forward. All of it please.

https://www.netgate.com/docs/pfsense/nat/forwarding-ports-with-pfsense.html

https://www.netgate.com/docs/pfsense/nat/port-forward-troubleshooting.html

fendy

@derelict 0_1534213714507_port forward.jpg

WAN type : Dynamic IP Address

fendy

when im using local network, everything fine. i can access all my server.. but when i try to access from outside.. i got nothing. Then if i try to replace dest. address to xxxx.ddns.net , i will redirect to pfsense web gui instead..

Gertjan

@fendy : I remember that GUI style vaguely. .... you do upgrade your pfSense ones in a while, right ?
(If not, we have to deal with all the errors and bugs from all these old versions, and help becomes pretty impossible)

fendy

@gertjan i'm still using the old ver. 2.1-RELEASE

Gertjan

@fendy said in Can't reach internal web server:

I'm a real beginner using pfsense, and any help is much appreciated.

Let me give you a big advise : ditch 2.1 right away.
Use a current version. Live will be easier.

When you start using a PC today, will you be looking for Windows 95 also ? ;)

Derelict

Upgrade then come back.

Gertjan

Consider doing a new install ;)
This way you know what its is to install something different as "install windows from CD".
The next time you need to re install pfSense for any reason, you'll be in a hurry (because your network is down at that moment) and you know what to do.

Btw : just for the record : why did you install 2.1 ? Where did it came from ? Didn't you find https://www.pfsense.org/download/ ?

johnpoz

Also where did you come up with this 200.10.1 ?? That is not rfc1918 space.. Its owned by

inetnum: 200.10.0/22
owner: Administradora BANCHILE de Fondos Mutuos
Country: CL

You do not just pull space out of thin air and try and use it, even if behind a nat.

Your HOME Network should be using rfc1918 space..