Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pass specific IP through to LAN, port forwarding, firewall rules

    Scheduled Pinned Locked Moved General pfSense Questions
    24 Posts 2 Posters 2.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      AKJim @Konstanti
      last edited by

      @konstanti OK, so a single port forwarding rule without a specified single host defined. No corresponding firewall rule is required?

      K 1 Reply Last reply Reply Quote 0
      • K
        Konstanti @AKJim
        last edited by Konstanti

        @akjim

        0_1549209547187_9ac8b652-26f2-4d37-8166-e24bb1429378-image.png

        pf will create the rule automatically
        for example
        0_1549209750534_2ae5df67-a3ae-4466-82ec-a32f58fd54df-image.png

        0_1549209678147_1d526703-abac-4f10-963e-ffe07ed63848-image.png

        1 Reply Last reply Reply Quote 0
        • A
          AKJim
          last edited by

          Hmmm ..... it's still not going through. I'll delete the rule again, reboot the netgate and start fresh. I appreciate your help. Be back after the fresh start ....

          K 1 Reply Last reply Reply Quote 0
          • K
            Konstanti @AKJim
            last edited by Konstanti

            @akjim

            We have to start over

            1. remove and disable all that in the pictures ( this is wrong)
            2. create port forwarding for 6281 (nat / port forwarding)
            3. check that the rule on the wan interface also appeared
            4. try to connect

            how is port forwarding configured on the router ?

            A 1 Reply Last reply Reply Quote 0
            • A
              AKJim @Konstanti
              last edited by

              @konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

              @akjim

              We have to start over

              1. remove and disable all that in the pictures ( this is wrong)
              2. create port forwarding for 6281 (nat / port forwarding)
              3. check that the rule on the wan interface also appeared
              4. try to connect
              1. Yes, I have removed all rules, then rebooted the device.
              2. Yes, done
              3. Yes: 0_1549211668263_8b4a3dc8-5d00-49f2-a971-88a7a04fc604-image.png
              4. Still rejected by device firewall: 0_1549211712076_8168876b-5de1-4de2-9ab6-bc62b543250e-image.png
              K A 2 Replies Last reply Reply Quote 0
              • K
                Konstanti @AKJim
                last edited by

                @akjim
                show me the rules on the wan interface

                A 1 Reply Last reply Reply Quote 0
                • A
                  AKJim @AKJim
                  last edited by

                  @akjim Port forwarding on the router is good, this traffic is being stopped by the netgate appliance only. If I remove the netgate appliance (pfSense) then everything works correctly.

                  1 Reply Last reply Reply Quote 0
                  • A
                    AKJim @Konstanti
                    last edited by

                    @konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

                    @akjim
                    show me the rules on the wan interface

                    0_1549211955107_dab2a242-d591-44cc-90fc-30ee4689c97c-image.png
                    0_1549211972674_76e3ae0a-3923-4d6e-a30d-2976762b0c38-image.png
                    0_1549211990825_9ff718a1-4856-4990-999f-aec75f61d31b-image.png

                    K 2 Replies Last reply Reply Quote 0
                    • K
                      Konstanti @AKJim
                      last edited by

                      @akjim
                      this is not what we need

                      i need
                      /firewall/rules/wan

                      A 1 Reply Last reply Reply Quote 0
                      • K
                        Konstanti @AKJim
                        last edited by Konstanti

                        @akjim

                        and I need a full log entry.
                        to see what pf is blocking
                        Status/System Logs/Firewall/Normal View
                        where you will see :interface, source, destination, port, protocol

                        1 Reply Last reply Reply Quote 0
                        • A
                          AKJim @Konstanti
                          last edited by

                          @konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

                          @akjim
                          this is not what we need

                          i need
                          /firewall/rules/wan

                          1_1549212815787_pfSense problem 00002.png 0_1549212815787_pfSense problem 00001.png

                          K 1 Reply Last reply Reply Quote 0
                          • K
                            Konstanti @AKJim
                            last edited by Konstanti

                            @akjim

                            here's what I need
                            the picture with all the rules
                            for example ,

                            0_1549212994252_33e9ee16-3061-4362-be3d-15957cb12a15-image.png

                            A 1 Reply Last reply Reply Quote 0
                            • A
                              AKJim @Konstanti
                              last edited by

                              @konstanti There is only this one, single rule ..... !

                              K 1 Reply Last reply Reply Quote 0
                              • K
                                Konstanti @AKJim
                                last edited by

                                @akjim
                                firewall log ???

                                0_1549213323003_4ab3ff2d-9bde-4633-addb-ce4ebf6e95c9-image.png

                                A 1 Reply Last reply Reply Quote 0
                                • A
                                  AKJim @Konstanti
                                  last edited by

                                  @konstanti Sorry for slow responses, the forum limits me as a new user to 1 post every 3 minutes. Here is the firewall log:
                                  0_1549213427032_cef3eb42-224e-4ff0-bc88-9e30f99dd7fb-image.png

                                  K 1 Reply Last reply Reply Quote 0
                                  • K
                                    Konstanti @AKJim
                                    last edited by Konstanti

                                    @akjim
                                    64.4.23.126 !!!!!!! - port forwarding rule
                                    error in source address
                                    64.4.231.126 - block !!!!!

                                    A 1 Reply Last reply Reply Quote 0
                                    • A
                                      AKJim @Konstanti
                                      last edited by

                                      @konstanti said in Pass specific IP through to LAN, port forwarding, firewall rules:

                                      @akjim
                                      64.4.23.126 !!!!!!! - port forwarding rule
                                      64.4.231.126 - block !!!!!

                                      I am an idiot!!! I see that now, and after making the address correction it is working properly.
                                      THANK YOU so much for your guidance and assistance!!!

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.