Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Port forwarding with multi-wan not working

    Scheduled Pinned Locked Moved NAT
    10 Posts 4 Posters 4.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      AnonymousV2
      last edited by

      I'm confused on how to port forward across all WAN connections - I have 3 WANs and want to be able to port forward the same port across all 3 WANs.

      What I thought I had to do was have 3 seperate forwards for each WAN connection to a port on a local address, but I've found it only works for the main WAN or doesn't work at all.

      I forwarded SSH on pfSense on each of the WANs and each of the port forwards works as it should, but when I try to forward anything else, it doesn't work. For example, Xbox live will not forward correctly and any other ports I try to forward will not work. Don't know what's going on  ??? ??? ???

      1 Reply Last reply Reply Quote 0
      • dotdashD
        dotdash
        last edited by

        I do this all the time, it really should just work. Verify you can get out on the WAN2 and WAN3 connections. If you are using AON, make sure you have a rule for each WAN. Try allowing ICMP and https access to the webgui on the secondary WANs, see if you can ping and access pfsense from them.

        1 Reply Last reply Reply Quote 0
        • A
          AnonymousV2
          last edited by

          All the WAN connections are working as they should, but the ports are still blocked. I've messed around with the settings and I got them to be open in the morning, but I come back in the afternoon and they're closed again.  ???

          1 Reply Last reply Reply Quote 0
          • dotdashD
            dotdash
            last edited by

            That doesn't make any sense- the firewall rules don't change by themselves. Why don't you post shots of your NAT and Firewall rules?

            1 Reply Last reply Reply Quote 0
            • A
              AnonymousV2
              last edited by

              This is what I currently have. Only one that works is SSH for the pfSense router. All the others don't.

              Here are the rules, they are the same on all WANs

              1 Reply Last reply Reply Quote 0
              • GruensFroeschliG
                GruensFroeschli
                last edited by

                Dont set as external: "any"
                Set it to the IP of the interface –> "interface address"

                We do what we must, because we can.

                Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                1 Reply Last reply Reply Quote 0
                • A
                  AnonymousV2
                  last edited by

                  @GruensFroeschli:

                  Dont set as external: "any"
                  Set it to the IP of the interface –> "interface address"

                  I had it originally set as that and it still didn't work, so I messed around with it and changed ext: any. I just set it to the interface address again and still no difference.

                  1 Reply Last reply Reply Quote 0
                  • dotdashD
                    dotdash
                    last edited by

                    Two things. You don't need a port forward to access ssh or the webgui on the firewall- you just need a firewall rule. Also, ssh is TCP and not tcp/udp. Don't use tcp/udp when the service is tcp only.

                    1 Reply Last reply Reply Quote 0
                    • T
                      Tib
                      last edited by

                      I use this (in the screenshot), bat the rules are work until…......wich I wrote

                      nat3.JPG
                      nat3.JPG_thumb

                      1 Reply Last reply Reply Quote 0
                      • dotdashD
                        dotdash
                        last edited by

                        You are going to have to give a bit more detail on this if you want someone to help. Do all port-forwards from all secondary WANs initally work, but stop working? What do you see in the logs when the port-forwards stop working? What do the state tables look like? What you are saying doesn't make any sense logically.
                        BTW- you should not use registered ports for external port shifts. (tcp/udp 2000 is Cisco SCCP.)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.