Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [Solved] I'm apparently unable to port forward...

    Scheduled Pinned Locked Moved Firewalling
    85 Posts 5 Posters 15.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • NinoM4sterN
      NinoM4ster
      last edited by

      @Derelict can you please answer my PM? it's very important. Thank you.

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by johnpoz

        So once again after long fought battle of user swearing its pfsense its PEBKAC....

        And could of found where the the issue was exactly in a few minutes if user had gone through the troubleshooting guide and just asked questions on any specifics they didn't actually understand on how to do.. Like packet capture/sniff, etc.

        I don't see how a host firewall had anything to do with which router was being used? Lets hope we get some more info..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        GrimsonG 1 Reply Last reply Reply Quote 0
        • GrimsonG
          Grimson Banned @johnpoz
          last edited by

          @johnpoz said in [Solved] I'm apparently unable to port forward...:

          I don't see how a host firewall had anything to do with which router was being used? Lets hope we get some more info..

          I don't use (G)UFW, but it possibly identifies networks based on the gateway MAC (similar to Windows) and then applies a different rule-set.

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            Ah -- great insight @Grimson makes a lot of sense... Just like windows can set a network as public and shutdown all inbound when the gateway mac changes.. Possible explanation for sure.

            Not being able to ping his public could of just been misconfigured pfsense rules? Lets hope he wants to do some more investigation.. So we are sure he understand how to configure rules, etc.

            He did post a icmp rule on his wan that should of allowed ping.. But maybe there was something in his floating? Or something else weird going on - the 1 trace to him was showing a 10 address in the path. And in that pic he posted with the icmp rule also had hits on his rfc1918 and bogon rules.. but no hits on the icmp rule, etc.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • NinoM4sterN
              NinoM4ster
              last edited by

              This post is deleted!
              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                I did just now.. With my thoughts on the matter. I will have to discuss with other mods. But please take into account others time and effort, etc.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • A
                  akuma1x
                  last edited by

                  So... I'm curious. What did the solution turn out to be? I don't see it clearly called out in the many messages above.

                  Jeff

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by johnpoz

                    Looks like he wants everything deleted -- what we assume is some misconfig on his boxes firewall he was trying to forward too.

                    Grimson's guess is that this firewall like windows firewall has some method of changing profiles based upon network information. Kind of like windows can switch between private and public profiles. While this does seem logical - the OP seems to want to just forget the whole thing.. Even though the information could be very informative to others in the same boat with problems in forwarding.

                    Not exactly sure what exact OS or firewall he was running - so makes it difficult to investigate further. Wish the OP would change their minds and continue down the path to enlightenment for just not the people involved closure but everyone else that might come across this thread. Like yourself.

                    I will look into further when I get a chance - and reread the troubleshooting guide. Since mention of firewall profiles and rule sets that could change upon network changes - like say the mac address of the gateway changing is for sure a good troubleshooting tip to finding a users problem.

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    NinoM4sterN 1 Reply Last reply Reply Quote 0
                    • NinoM4sterN
                      NinoM4ster @johnpoz
                      last edited by

                      @johnpoz

                      Ubuntu 16.04.5 LTS x86_64
                      Kernel 4.4.0-137-generic
                      UFW 0.35-0ubuntu2
                      rules configured through Putty + Xming using GUFW 16.04.1-0ubuntu1.1
                      Apache 2.4.341 with a few VirtualHosts listening at 192.168.10.6:80

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        Thanks I will look into if some profiles could of been involved in the problem. Would you nice enough to go into some details of what exactly was wrong in the firewall on the box..

                        Was it some firewall profile change - a misconfigured rule? with wrong port? But you had stated they worked with other router, etc. So some details of the puzzle are still missing.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • NinoM4sterN
                          NinoM4ster
                          last edited by

                          Soon I'm gonna give you more details.. like the rules I was using and so..

                          I can't really do that now.

                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator
                            last edited by

                            Great thanks... Curious minds need to know ;)

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.