Pass specific IP through to LAN, port forwarding, firewall rules

[Konstanti]

@akjim
Hey
which service Synology performs the backup?
Hyper Backup ?

[AKJim]

@konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

@akjim
Hey
which service Synology performs the backup?

Synology's HyperBackup

[Konstanti]

@akjim

Do not pay attention to the Russian language
Everything is clear
What ports do I need to forward for Hyper Backup
What you're doing is wrong.

[Konstanti]

@akjim
The first picture shows that pf is blocking tcp port 6281

[AKJim]

@konstanti Yes, I know that. Hyperbackup is set up correctly. I just need to get the connection through the netgate to the Blacksburg DS. Without the netgate in the system everything works perfectly.

[Konstanti]

@akjim

This way, the required ports are forwarded
Everything else need to disable and remove
https://www.netgate.com/docs/pfsense/nat/forwarding-ports-with-pfsense.html

[AKJim]

@konstanti OK, so a single port forwarding rule without a specified single host defined. No corresponding firewall rule is required?

[Konstanti]

@akjim

pf will create the rule automatically
for example

[AKJim]

Hmmm ..... it's still not going through. I'll delete the rule again, reboot the netgate and start fresh. I appreciate your help. Be back after the fresh start ....

[Konstanti]

@akjim

We have to start over

1. remove and disable all that in the pictures ( this is wrong)
2. create port forwarding for 6281 (nat / port forwarding)
3. check that the rule on the wan interface also appeared
4. try to connect

how is port forwarding configured on the router ?

[AKJim]

@konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

@akjim

We have to start over

1. remove and disable all that in the pictures ( this is wrong)
2. create port forwarding for 6281 (nat / port forwarding)
3. check that the rule on the wan interface also appeared
4. try to connect

1. Yes, I have removed all rules, then rebooted the device.
2. Yes, done
3. Yes:
4. Still rejected by device firewall:

[Konstanti]

@akjim
show me the rules on the wan interface

[AKJim]

@akjim Port forwarding on the router is good, this traffic is being stopped by the netgate appliance only. If I remove the netgate appliance (pfSense) then everything works correctly.

[AKJim]

@konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

@akjim
show me the rules on the wan interface

[Konstanti]

@akjim
this is not what we need

i need
/firewall/rules/wan

[Konstanti]

@akjim

and I need a full log entry.
to see what pf is blocking
Status/System Logs/Firewall/Normal View
where you will see :interface, source, destination, port, protocol

[AKJim]

@konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

@akjim
this is not what we need

i need
/firewall/rules/wan

[Konstanti]

@akjim

here's what I need
the picture with all the rules
for example ,

[AKJim]

@konstanti There is only this one, single rule ..... !

[Konstanti]

@akjim
firewall log ???