Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Nas4Free behind pfsense

    Scheduled Pinned Locked Moved NAT
    38 Posts 6 Posters 6.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      irs
      last edited by

      I have a problem, need to setup a way to access nas4free from the pfsense.

      I have 4 ports Ethernet

      1. WAN
      2. LAN  192.168.0.1
      3. OPT1 192.168.100.1
      4OPT2  192.168.2.1

      Nas4Free is on LAN interface
      DVR on same LAN interface
      Opt1 and Opt1 are available if required.

      My question:

      I am unable to access DVR on my lan 192.168.0.1/24
      I am unable to access Nas4Free from LAN 192.168.0.250

      can anybody guide me if I need to configure NAT and Rules though I tried but fail.

      this is my first time I am doing so.

      1 Reply Last reply Reply Quote 0
      • A
        Animosity022
        last edited by

        If you are accessing it internally, you wouldn't need a NAT, you just need firewall rules to allow traffic from the LANs to each other.

        1 Reply Last reply Reply Quote 0
        • I
          irs
          last edited by

          can you give example?

          1 Reply Last reply Reply Quote 0
          • P
            P3R
            last edited by

            In Firewall, Rules, LAN add the following pass rules above any blocking rules:
            Interface LAN, TCP/IP Version IPv4, Protocol Any, Source LAN net, Destination IP-address of DVR
            Interface LAN, TCP/IP Version IPv4, Protocol Any, Source LAN net, Destination IP-address of Nas4Free

            No NAT as you're on internal networks and not going out on the internet.

            Rules are always only acting on traffic coming in on the respective interface.

            Obviously when you've understood how rules work you can refine them to be stricter regarding what protocols are allowed or even broader if you want to allow more inside your network. However doing the latter would eventually defeat the concept of having multiple internal interfaces at all.

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              The out of the box rules on lan should allow lan to talk to any of your other networks/vlans since it defaults to any any.

              Out of the box opt interfaces have not rules - so if you want create connections from opt or vlan interface networks into lan or elsewhere you would need to create rules.

              You sure its not firewall on nas or dvr blocking access from other networks?  Or possible your dvr wants to use multicast or something that doesn't pass network boundaries.

              Are you just having issue with resolving the nas or dvr names?  Have you modified the lan rules?  What rules do you have on your opt interfaces?  What protocols are in use when talking to your nas or dvr?

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.7.2, 24.11

              1 Reply Last reply Reply Quote 0
              • I
                irs
                last edited by

                Thank you for your help

                1 Reply Last reply Reply Quote 0
                • I
                  irs
                  last edited by

                  I am still not been able to run Nas4free behind firewall for remote access

                  I have static ips for firewall,  Nas4free and DVR I can access DVR remotely as well as local but still unable to access Nas4Free from remote location.

                  I know all of you recommend openVPN but I don't know how to setup openvpn as I tried but confused fr example I dont know how to make certificate and the name of server host or address in openvpn clients.

                  can anybody help me for step by step configuration.

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    you click he wizard tab and will have openvpn up and running in 30 seconds..

                    Does your nas4free have a gateway set pointing to pfsense?  How exactly are you trying to access this nas4free? http? ftp? Smb??  What protocol??

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                    1 Reply Last reply Reply Quote 0
                    • I
                      irs
                      last edited by

                      i am using owncloud on nas4free and smb

                      on pfsense (options on wizard local user access/ldap or radius)

                      on pfsense I understand Local User Access is for user who access locally but to allow remote access outside of my network which shouid I use LDAP or Radius? am I right?

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        "local user access/ldap or radius)"

                        Really dude???  Do you have ldap or radius for your users to auth too?

                        So you want to access smb across the public internet.. Yeah good luck with that ;)

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                        1 Reply Last reply Reply Quote 0
                        • I
                          irs
                          last edited by

                          no i was asking you what is local user access?
                          I do not want to use samba as well because i am using owncloud

                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator
                            last edited by

                            Its a user you create on pfsense, so that this user can access your vpn, etc.

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                            1 Reply Last reply Reply Quote 0
                            • jahonixJ
                              jahonix
                              last edited by

                              @irs:

                              no i was asking you what is local user access?

                              Are you sure this is not over-your-head at the moment? Start small, tinker with your setup and get used to how pfSense works. Then you can configure it reasonably without shooting yourself in the foot.
                              Put "learn OpenVPN configuration" on your to-do list as well.

                              1 Reply Last reply Reply Quote 0
                              • I
                                irs
                                last edited by

                                I am looking a guide to do configure a DVR behind pfsense?

                                I tried several attempts port forward but no luck.

                                I am now trying to build a openVPN but i have few questions.

                                1.) I have static public ip where should I put that static IP? though already configured on WAN
                                2.) should I need to port forward even in openVPN?

                                how I am going to access DVR remotely?
                                Thanks in advance

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by

                                  1. you wouldn't put it anywhere in openvpn..
                                  2. No

                                  You would access your dvr via its fqdn you resolve once you have connected to your vpn or via its IP address.

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                  1 Reply Last reply Reply Quote 0
                                  • I
                                    irs
                                    last edited by

                                    i successfully completed openVPN but can only access firewall nothing else.

                                    what wrong i am doing?

                                    still can not access nas4free from remote login.
                                    ?

                                    1 Reply Last reply Reply Quote 0
                                    • johnpozJ
                                      johnpoz LAYER 8 Global Moderator
                                      last edited by

                                      And do you have any firewall on your nas4free device that would limit access to the local network.  And now your coming from your vpn network.

                                      Can you ping the pfsense IP on the lan interface your nas4free is connected too?  Do a traceroute from your vpnclient to the nas4free IP do you see the trace go down your tunnel?  Did you place any firewall rules on your vpn connection..

                                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                                      If you get confused: Listen to the Music Play
                                      Please don't Chat/PM me for help, unless mod related
                                      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                      1 Reply Last reply Reply Quote 0
                                      • I
                                        irs
                                        last edited by

                                        i can ping with pfsense the ip address of my nas4free but when ever i tried to ping from my remote computer it wont

                                        1 Reply Last reply Reply Quote 0
                                        • I
                                          irs
                                          last edited by

                                          "Do a traceroute from your vpnclient to the nas4free IP do you see the trace go down your tunnel?  Did you place any firewall rules on your vpn connection.."

                                          How to traceroute? I can not see any traceroute command in vpnclient
                                          i hav no firewall rules for vpn

                                          1 Reply Last reply Reply Quote 0
                                          • B
                                            biggsy
                                            last edited by

                                            @johnpoz:

                                            And do you have any firewall on your nas4free device that would limit access to the local network.

                                            From the NAS4Free release notes:

                                            Login error 403
                                            Do you have WebGUI Login error 403? Make shure the pc is in the same network! by default the System|General Setup Hosts allow field is empty so any one on the same network of LAN interface can access the WebGUI allowed. With a space delimited set of IP or CIDR notation you can add computers from outer network. As an example the outer IP address and LAN address for remote access.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.