Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pass specific IP through to LAN, port forwarding, firewall rules

    Scheduled Pinned Locked Moved General pfSense Questions
    24 Posts 2 Posters 2.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      Konstanti @AKJim
      last edited by Konstanti

      @akjim

      0_1549208759667_0047344d-1960-4d94-9d00-9abc14b8ca9d-image.png

      This way, the required ports are forwarded
      Everything else need to disable and remove
      https://www.netgate.com/docs/pfsense/nat/forwarding-ports-with-pfsense.html

      A 1 Reply Last reply Reply Quote 0
      • A
        AKJim @Konstanti
        last edited by

        @konstanti OK, so a single port forwarding rule without a specified single host defined. No corresponding firewall rule is required?

        K 1 Reply Last reply Reply Quote 0
        • K
          Konstanti @AKJim
          last edited by Konstanti

          @akjim

          0_1549209547187_9ac8b652-26f2-4d37-8166-e24bb1429378-image.png

          pf will create the rule automatically
          for example
          0_1549209750534_2ae5df67-a3ae-4466-82ec-a32f58fd54df-image.png

          0_1549209678147_1d526703-abac-4f10-963e-ffe07ed63848-image.png

          1 Reply Last reply Reply Quote 0
          • A
            AKJim
            last edited by

            Hmmm ..... it's still not going through. I'll delete the rule again, reboot the netgate and start fresh. I appreciate your help. Be back after the fresh start ....

            K 1 Reply Last reply Reply Quote 0
            • K
              Konstanti @AKJim
              last edited by Konstanti

              @akjim

              We have to start over

              1. remove and disable all that in the pictures ( this is wrong)
              2. create port forwarding for 6281 (nat / port forwarding)
              3. check that the rule on the wan interface also appeared
              4. try to connect

              how is port forwarding configured on the router ?

              A 1 Reply Last reply Reply Quote 0
              • A
                AKJim @Konstanti
                last edited by

                @konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

                @akjim

                We have to start over

                1. remove and disable all that in the pictures ( this is wrong)
                2. create port forwarding for 6281 (nat / port forwarding)
                3. check that the rule on the wan interface also appeared
                4. try to connect
                1. Yes, I have removed all rules, then rebooted the device.
                2. Yes, done
                3. Yes: 0_1549211668263_8b4a3dc8-5d00-49f2-a971-88a7a04fc604-image.png
                4. Still rejected by device firewall: 0_1549211712076_8168876b-5de1-4de2-9ab6-bc62b543250e-image.png
                K A 2 Replies Last reply Reply Quote 0
                • K
                  Konstanti @AKJim
                  last edited by

                  @akjim
                  show me the rules on the wan interface

                  A 1 Reply Last reply Reply Quote 0
                  • A
                    AKJim @AKJim
                    last edited by

                    @akjim Port forwarding on the router is good, this traffic is being stopped by the netgate appliance only. If I remove the netgate appliance (pfSense) then everything works correctly.

                    1 Reply Last reply Reply Quote 0
                    • A
                      AKJim @Konstanti
                      last edited by

                      @konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

                      @akjim
                      show me the rules on the wan interface

                      0_1549211955107_dab2a242-d591-44cc-90fc-30ee4689c97c-image.png
                      0_1549211972674_76e3ae0a-3923-4d6e-a30d-2976762b0c38-image.png
                      0_1549211990825_9ff718a1-4856-4990-999f-aec75f61d31b-image.png

                      K 2 Replies Last reply Reply Quote 0
                      • K
                        Konstanti @AKJim
                        last edited by

                        @akjim
                        this is not what we need

                        i need
                        /firewall/rules/wan

                        A 1 Reply Last reply Reply Quote 0
                        • K
                          Konstanti @AKJim
                          last edited by Konstanti

                          @akjim

                          and I need a full log entry.
                          to see what pf is blocking
                          Status/System Logs/Firewall/Normal View
                          where you will see :interface, source, destination, port, protocol

                          1 Reply Last reply Reply Quote 0
                          • A
                            AKJim @Konstanti
                            last edited by

                            @konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

                            @akjim
                            this is not what we need

                            i need
                            /firewall/rules/wan

                            1_1549212815787_pfSense problem 00002.png 0_1549212815787_pfSense problem 00001.png

                            K 1 Reply Last reply Reply Quote 0
                            • K
                              Konstanti @AKJim
                              last edited by Konstanti

                              @akjim

                              here's what I need
                              the picture with all the rules
                              for example ,

                              0_1549212994252_33e9ee16-3061-4362-be3d-15957cb12a15-image.png

                              A 1 Reply Last reply Reply Quote 0
                              • A
                                AKJim @Konstanti
                                last edited by

                                @konstanti There is only this one, single rule ..... !

                                K 1 Reply Last reply Reply Quote 0
                                • K
                                  Konstanti @AKJim
                                  last edited by

                                  @akjim
                                  firewall log ???

                                  0_1549213323003_4ab3ff2d-9bde-4633-addb-ce4ebf6e95c9-image.png

                                  A 1 Reply Last reply Reply Quote 0
                                  • A
                                    AKJim @Konstanti
                                    last edited by

                                    @konstanti Sorry for slow responses, the forum limits me as a new user to 1 post every 3 minutes. Here is the firewall log:
                                    0_1549213427032_cef3eb42-224e-4ff0-bc88-9e30f99dd7fb-image.png

                                    K 1 Reply Last reply Reply Quote 0
                                    • K
                                      Konstanti @AKJim
                                      last edited by Konstanti

                                      @akjim
                                      64.4.23.126 !!!!!!! - port forwarding rule
                                      error in source address
                                      64.4.231.126 - block !!!!!

                                      A 1 Reply Last reply Reply Quote 0
                                      • A
                                        AKJim @Konstanti
                                        last edited by

                                        @konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

                                        @akjim
                                        64.4.23.126 !!!!!!! - port forwarding rule
                                        64.4.231.126 - block !!!!!

                                        I am an idiot!!! I see that now, and after making the address correction it is working properly.
                                        THANK YOU so much for your guidance and assistance!!!

                                        1 Reply Last reply Reply Quote 0
                                        • First post
                                          Last post
                                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.