Port forwarding problem!



  • Pfsense respected guru!!! Please do not kick, as the situation is not always regular. Pfsense RELEASE  2.2.4-. Trying forward ports in the NAT and Rules, it does not work. Previously, everything worked. Two days ago changed ip on wan, and then stopped working. I open IPCM protocol and Pfsense answered on ping. Dropped the configuration to default, nothing helps. Help please what to do….


  • Netgate

    First and foremost, upgrade. What is your excuse for being on 2.2.4? (I love to hear them)

    Don't set a source port.



  • Using this vertion? because there was no need for update, and everithing was working…

    Tell please which release is the best for update?


  • Netgate

    Guess a few years-worth of patches and security vulnerabilities is "no need."

    The latest. 2.4.2-P1



  • Thank you, of'course it my foult for no updates…


  • Netgate

    Don't set a source port on your port forwards.



  • Derelict - Thank you a lot. I spent 2 days solving this problem. It was all trite and simple :)


  • Netgate

    Yeah. You had to click advanced and ignore this:

    ![Screen Shot 2018-01-29 at 11.26.29 PM.png](/public/imported_attachments/1/Screen Shot 2018-01-29 at 11.26.29 PM.png)
    ![Screen Shot 2018-01-29 at 11.26.29 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2018-01-29 at 11.26.29 PM.png_thumb)



  • please tell me why now network ip cameras does not see external ip adress?


  • Netgate

    Please be more specific.



  • I have solved this problem. There are another problem. I got several Ip cameras. Ip adresses of cameras are static. Trying to connect them from the internet, it not working. I created the rule in snapshot below. The only thing is, DHCP range are x.x.x.15 - x.x.x.199, ip adresses on cameras are static.



  • Rebel Alliance Global Moderator

    No need for security patches to your firewall… And now let's open up the IP camera's to the internet..  Which of the 1200 some models of IP camera is use that has zero security and prob be joining the Persirai bot net in minutes ;) do you have?

    And again - what part did you not get about the source port is going to be ANY... why do you have source port set to only 8024??



  • Ip cameras are in the office, but nvr are out of the office. I need to record from these cameras. (((

    There are several cameras and by the port i whant to identify cameras



  • @Shuh:

    Ip cameras are in the office, but nvr are out of the office. I need to record from these cameras. (((

    Then use a VPN, there is no excuse for opening these devices to the world.