Redirecting public traffic to an internal IP/port
-
Good morning everybody,
I'm working to configuring a pfSense 2.5 version to act as a firewall in this way:
-
two Ethernet interfaces: one WAN interface (ip: 192.168.101.16) and one LAN interface (ip: 192.168.201.16). All incoming public traffic arriving from another fw to a specific public static IP it's been NATted to the WAN pfSense interface. Subnet 192.168.33.0 is the final destination from incoming traffic (pfSense LAN 192.168.201.0 has a gateway to 192.168.33.0, 192.168.201.250).
-
WAN interface has its proper gateway defined (GWWAN)
-
LAN interface has no general gateway defined but there is a routing rules defining a gateway (GWLAN)
-
A 1:1 NAT rules has been defined:
-
Routing table:
-
Firewall rules on WAN interface:
-
Firewall rules on LAN interface:
-
Logging incoming traffic we can see that all incoming traffic from WAN interface (from public IPs) stops at LAN IP address (ports redirection/filtering is not important in this moment):
What am I not seeing?
Thank you in advance.Marco
-
-
@mdwarf
Your 1:1 NAT rule forwards the traffic to the pfSense LAN address, but it should be forwarded to the LAN gateway.