Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Port Foward 80/443 to Web Server/DMZ Issue

    Scheduled Pinned Locked Moved NAT
    8 Posts 2 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ?
      A Former User
      last edited by

      Need some guidance on properly setting up port forward 80/443 to DMZ. Currently having connection issues to web server in DMZ, i.e cannot connect to web server outside of LAN.

      Attached are pictures of my firewall and port forward rules, as well as NAT config. I included 2 port forward rules in my LAN that I am not sure are interfering.

      If you need other info please let me know.

      Thanks.

      ![Port Forward 2.JPG](/public/imported_attachments/1/Port Forward 2.JPG)
      ![Port Forward 2.JPG_thumb](/public/imported_attachments/1/Port Forward 2.JPG_thumb)
      ![Port Foward.JPG](/public/imported_attachments/1/Port Foward.JPG)
      ![Port Foward.JPG_thumb](/public/imported_attachments/1/Port Foward.JPG_thumb)
      ![Firewall Rules DMZ.JPG](/public/imported_attachments/1/Firewall Rules DMZ.JPG)
      ![Firewall Rules DMZ.JPG_thumb](/public/imported_attachments/1/Firewall Rules DMZ.JPG_thumb)
      ![Firewall Rules WAN (2).JPG](/public/imported_attachments/1/Firewall Rules WAN (2).JPG)
      ![Firewall Rules WAN (2).JPG_thumb](/public/imported_attachments/1/Firewall Rules WAN (2).JPG_thumb)
      ![Firewall Rules WAN.JPG](/public/imported_attachments/1/Firewall Rules WAN.JPG)
      ![Firewall Rules WAN.JPG_thumb](/public/imported_attachments/1/Firewall Rules WAN.JPG_thumb)
      NAT.JPG
      NAT.JPG_thumb

      1 Reply Last reply Reply Quote 0
      • V
        viragomann
        last edited by

        Is your WAN address a public or a private one?

        Check the filter logs. Enable the display of rule description and logging of default rules in the log settings to see which rule is blocking the access.

        1 Reply Last reply Reply Quote 0
        • ?
          A Former User
          last edited by

          @viragomann:

          Is your WAN address a public or a private one?

          Check the filter logs. Enable the display of rule description and logging of default rules in the log settings to see which rule is blocking the access.

          WAN address is public. Enabled all rules, but logs do not show destination address of WANIP:80.

          1 Reply Last reply Reply Quote 0
          • V
            viragomann
            last edited by

            The log should show the translated IP as destination.

            1 Reply Last reply Reply Quote 0
            • ?
              A Former User
              last edited by

              @viragomann:

              The log should show the translated IP as destination.

              Even still, its not showing. "Canyouseeme.org" test fails as well saying Connection Timed Out. Perhaps 80 is blocked by my ISP?

              1 Reply Last reply Reply Quote 0
              • V
                viragomann
                last edited by

                You can check this with "Packet capture", find it in the Diagnostic menu.
                Select WAN interface and enter port 80 and start the capture, then try an access from outside.

                1 Reply Last reply Reply Quote 0
                • ?
                  A Former User
                  last edited by

                  @viragomann:

                  You can check this with "Packet capture", find it in the Diagnostic menu.
                  Select WAN interface and enter port 80 and start the capture, then try an access from outside.

                  I tried this. Didn't see it, unfortunately.

                  1 Reply Last reply Reply Quote 0
                  • V
                    viragomann
                    last edited by

                    So the packets don't reach your WAN interface obviously and it will not be a pfSense issue.

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.