Wrong port forwarding?
-
Hello,
Im pretty new to pfsense but the installation was very straightforward and i managed to setup everything except a little strange port forwarding.
I followed some examples and guides on how to set it up but this particular rule is getting me mad.Before pfsense we had a FritzBox 7430 and the redirect was working.
Now i setup the fritzbox to send all the traffic (Exposed Host aka DMZ) to the pfsense box and all the port forwarding rules that i setup seems to work except for this one.
On the Fritzbox the was to redirect HTTP (port 80) to our little server on port 90 with a fixed IP (cannot use same port because there is a web server alredy on port 80 for the local network) and everything was working ok.
I tried to set it up on pfsense [image1] and seems to do something but not what was before with the rule on the fritzbox. The correct page should be [image2] and what i get is [image3].
Image1
Image2
Image3
Any suggestion?
-
in your port forward you need to use dest wan address, not *
-
Sorry i took so long.
Unlucky this doesnt work either.
-
well then go through the troubleshooting doc
https://doc.pfsense.org/index.php/Port_Forward_TroubleshootingPost then you have questions.
You sure you don't want it the other way around. Http server is listening on 80, but you want to use a different port on your wan because your isp blocks 80 or something? So your dest would be 90 and your nat would be 80
Your error in your 3rd pic has nothing to do with a port forward.
-
Ok, i did some troubleshooting but nothing wor so far.
From the docs this is what i checked:
1. Seems good cause is forwarding something
2. Enabled but port open, tested in local network and works
3. Client is using pfsense as gateway
4. Client is listening, works on local network and tested from Diagnostics on pfsense if the port on the client is open
5. ISP is not blocking, work with just fritzbox and not with pfsense. Doesnt work either from the network between pfsense and the modem/router
6. Local works, between pfsense and router not and from external ip neither
7. Not sure about this, im no expert
8. Border router has Exposed host set to pfsense.
9. No captive portal
10-11-12-13. Nop
14. No gateway on rules
15. UPnP is disabledYour error in your 3rd pic has nothing to do with a port forward.
Guessed too but why it works on a normal router with nat and not on pfsense?
You sure you don't want it the other way around. Http server is listening on 80, but you want to use a different port on your wan because your isp blocks 80 or something? So your dest would be 90 and your nat would be 80
Im not using port 80 on the server because it has Windows remote web access on it and the program that is using port 90 is not managed by us, they installed it and configured on port 90.
ISP is not blocking anything.Page works from LAN [192.168.10.x] but not from Ext or network before pfsense [192.168.11.x]
Our network atm is like this:Ext IP -> fritzbox with exposed host (DMZ) [192.168.11.1] -> [192.168.11.2] PFsense WAN and PFsense LAN [192.168.10.1] (gateway, dhcp etc) -> Clients [192.168.10.x] and Server [192.168.10.250]
I tried to forward port 90 on port 90 with the same result. 3rd pic. I also added https forward, just to be sure but timed out, no service i guess on this port on the server.
-
So is there a firewall on this machine that blocks access from non local networks for some aspect of your site?
Your clearly getting to the site if your getting that error since that error says there is a problem with your sitehelper script on the C drive.. How exactly would you see such an error if the port forwarding was not working..
Put a up a test page that says hey test page via html.. If that works then again that points to something wrong on our server..
-
Hello there, i finally solved. The problem wasnt pfsense but settings in the windows server machine.
I just added a binding address in the web server configuration and voila.
Its really strange because it was working out of the box with the fritzbox NAT.
Thank you for your help :D