opening ports on firewall
-
The first two WAN rules should probably be "WAN Address" instead of "This Firewall".
Just a guess.
-
I have the wan packets capture what do you wan me to post here?
-
Just enough to show the traffic is hitting WAN.
If it is, then a pcap for the proper traffic on LAN.
-
Does this satisfy the wan is seeing port 80. My WAN IP is x.x.176.180
-
No. That's an outbound connection from your WAN address.
-
Its not that hard dude..
Can you see me .org
It shows closed because I don't have anything listening or forwarded.. But you can see the traffic gets there.
-
I am not seeing packets on port 80.
Looks like my isp is blocking or something else is blocking unless I am missing something else.
I have my cable modem plugged directly into my vmware server that is hosting the pfsense vm.
-
Just off the phone with suddenlink. Residential accounts are not able to open port 80. The same level of service for a business account for the same 1Gbps account is approximately 3x the cost. That is not reasonable.
-
What is the model of your cable modem? It is in bridge mode.. Correct?
-
Quick google search says suddenlink pretty much sucks for this. Sorry.
That's why we pcap. Nothing like making sure the traffic is actually on the wire before proceeding with additional troubleshooting.
-
Here is the version of modem I have.
ARRIS DOCSIS 3.0 Touchstone WideBand Cable Modem
HW_REV: 3
VENDOR: ARRIS Group, Inc.
BOOTR: 2.2.0.45
SW_REV: 9.1.103S
MODEL: CM3200A -
@richardlhughes said in opening ports on firewall:
Here is the version of modem I have.
ARRIS DOCSIS 3.0 Touchstone WideBand Cable Modem
MODEL: CM3200AI didn't catch your post right before I asked. Can you use port 88 instead?
-
I just need to figure out the SSL certs at this point with cloudflare service. I am not sure if I can use the acme service or not. I am hoping I can make it auto renew if needed. Does it make sense to use ssl offloading or just ssl on the front end?
I am also looking at moving my open vpn to the HAProxy on 443.
