Port Foward 80/443 to Web Server/DMZ Issue

[angdigi]

Need some guidance on properly setting up port forward 80/443 to DMZ. Currently having connection issues to web server in DMZ, i.e cannot connect to web server outside of LAN.

Attached are pictures of my firewall and port forward rules, as well as NAT config. I included 2 port forward rules in my LAN that I am not sure are interfering.

If you need other info please let me know.

Thanks.

.JPG)
.JPG_thumb)

[viragomann]

Is your WAN address a public or a private one?

Check the filter logs. Enable the display of rule description and logging of default rules in the log settings to see which rule is blocking the access.

[angdigi]

@viragomann:

Is your WAN address a public or a private one?

Check the filter logs. Enable the display of rule description and logging of default rules in the log settings to see which rule is blocking the access.

WAN address is public. Enabled all rules, but logs do not show destination address of WANIP:80.

[viragomann]

The log should show the translated IP as destination.

[angdigi]

@viragomann:

The log should show the translated IP as destination.

Even still, its not showing. "Canyouseeme.org" test fails as well saying Connection Timed Out. Perhaps 80 is blocked by my ISP?

[viragomann]

You can check this with "Packet capture", find it in the Diagnostic menu.
Select WAN interface and enter port 80 and start the capture, then try an access from outside.

[angdigi]

@viragomann:

You can check this with "Packet capture", find it in the Diagnostic menu.
Select WAN interface and enter port 80 and start the capture, then try an access from outside.

I tried this. Didn't see it, unfortunately.

[viragomann]

So the packets don't reach your WAN interface obviously and it will not be a pfSense issue.