Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pass specific IP through to LAN, port forwarding, firewall rules

    Scheduled Pinned Locked Moved General pfSense Questions
    24 Posts 2 Posters 2.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      AKJim @Konstanti
      last edited by

      @konstanti Yes, I know that. Hyperbackup is set up correctly. I just need to get the connection through the netgate to the Blacksburg DS. Without the netgate in the system everything works perfectly.

      K 1 Reply Last reply Reply Quote 0
      • K
        Konstanti @AKJim
        last edited by Konstanti

        @akjim

        0_1549208759667_0047344d-1960-4d94-9d00-9abc14b8ca9d-image.png

        This way, the required ports are forwarded
        Everything else need to disable and remove
        https://www.netgate.com/docs/pfsense/nat/forwarding-ports-with-pfsense.html

        A 1 Reply Last reply Reply Quote 0
        • A
          AKJim @Konstanti
          last edited by

          @konstanti OK, so a single port forwarding rule without a specified single host defined. No corresponding firewall rule is required?

          K 1 Reply Last reply Reply Quote 0
          • K
            Konstanti @AKJim
            last edited by Konstanti

            @akjim

            0_1549209547187_9ac8b652-26f2-4d37-8166-e24bb1429378-image.png

            pf will create the rule automatically
            for example
            0_1549209750534_2ae5df67-a3ae-4466-82ec-a32f58fd54df-image.png

            0_1549209678147_1d526703-abac-4f10-963e-ffe07ed63848-image.png

            1 Reply Last reply Reply Quote 0
            • A
              AKJim
              last edited by

              Hmmm ..... it's still not going through. I'll delete the rule again, reboot the netgate and start fresh. I appreciate your help. Be back after the fresh start ....

              K 1 Reply Last reply Reply Quote 0
              • K
                Konstanti @AKJim
                last edited by Konstanti

                @akjim

                We have to start over

                1. remove and disable all that in the pictures ( this is wrong)
                2. create port forwarding for 6281 (nat / port forwarding)
                3. check that the rule on the wan interface also appeared
                4. try to connect

                how is port forwarding configured on the router ?

                A 1 Reply Last reply Reply Quote 0
                • A
                  AKJim @Konstanti
                  last edited by

                  @konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

                  @akjim

                  We have to start over

                  1. remove and disable all that in the pictures ( this is wrong)
                  2. create port forwarding for 6281 (nat / port forwarding)
                  3. check that the rule on the wan interface also appeared
                  4. try to connect
                  1. Yes, I have removed all rules, then rebooted the device.
                  2. Yes, done
                  3. Yes: 0_1549211668263_8b4a3dc8-5d00-49f2-a971-88a7a04fc604-image.png
                  4. Still rejected by device firewall: 0_1549211712076_8168876b-5de1-4de2-9ab6-bc62b543250e-image.png
                  K A 2 Replies Last reply Reply Quote 0
                  • K
                    Konstanti @AKJim
                    last edited by

                    @akjim
                    show me the rules on the wan interface

                    A 1 Reply Last reply Reply Quote 0
                    • A
                      AKJim @AKJim
                      last edited by

                      @akjim Port forwarding on the router is good, this traffic is being stopped by the netgate appliance only. If I remove the netgate appliance (pfSense) then everything works correctly.

                      1 Reply Last reply Reply Quote 0
                      • A
                        AKJim @Konstanti
                        last edited by

                        @konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

                        @akjim
                        show me the rules on the wan interface

                        0_1549211955107_dab2a242-d591-44cc-90fc-30ee4689c97c-image.png
                        0_1549211972674_76e3ae0a-3923-4d6e-a30d-2976762b0c38-image.png
                        0_1549211990825_9ff718a1-4856-4990-999f-aec75f61d31b-image.png

                        K 2 Replies Last reply Reply Quote 0
                        • K
                          Konstanti @AKJim
                          last edited by

                          @akjim
                          this is not what we need

                          i need
                          /firewall/rules/wan

                          A 1 Reply Last reply Reply Quote 0
                          • K
                            Konstanti @AKJim
                            last edited by Konstanti

                            @akjim

                            and I need a full log entry.
                            to see what pf is blocking
                            Status/System Logs/Firewall/Normal View
                            where you will see :interface, source, destination, port, protocol

                            1 Reply Last reply Reply Quote 0
                            • A
                              AKJim @Konstanti
                              last edited by

                              @konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

                              @akjim
                              this is not what we need

                              i need
                              /firewall/rules/wan

                              1_1549212815787_pfSense problem 00002.png 0_1549212815787_pfSense problem 00001.png

                              K 1 Reply Last reply Reply Quote 0
                              • K
                                Konstanti @AKJim
                                last edited by Konstanti

                                @akjim

                                here's what I need
                                the picture with all the rules
                                for example ,

                                0_1549212994252_33e9ee16-3061-4362-be3d-15957cb12a15-image.png

                                A 1 Reply Last reply Reply Quote 0
                                • A
                                  AKJim @Konstanti
                                  last edited by

                                  @konstanti There is only this one, single rule ..... !

                                  K 1 Reply Last reply Reply Quote 0
                                  • K
                                    Konstanti @AKJim
                                    last edited by

                                    @akjim
                                    firewall log ???

                                    0_1549213323003_4ab3ff2d-9bde-4633-addb-ce4ebf6e95c9-image.png

                                    A 1 Reply Last reply Reply Quote 0
                                    • A
                                      AKJim @Konstanti
                                      last edited by

                                      @konstanti Sorry for slow responses, the forum limits me as a new user to 1 post every 3 minutes. Here is the firewall log:
                                      0_1549213427032_cef3eb42-224e-4ff0-bc88-9e30f99dd7fb-image.png

                                      K 1 Reply Last reply Reply Quote 0
                                      • K
                                        Konstanti @AKJim
                                        last edited by Konstanti

                                        @akjim
                                        64.4.23.126 !!!!!!! - port forwarding rule
                                        error in source address
                                        64.4.231.126 - block !!!!!

                                        A 1 Reply Last reply Reply Quote 0
                                        • A
                                          AKJim @Konstanti
                                          last edited by

                                          @konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

                                          @akjim
                                          64.4.23.126 !!!!!!! - port forwarding rule
                                          64.4.231.126 - block !!!!!

                                          I am an idiot!!! I see that now, and after making the address correction it is working properly.
                                          THANK YOU so much for your guidance and assistance!!!

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.