Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    NAT rule is not working

    Scheduled Pinned Locked Moved NAT
    2 Posts 2 Posters 505 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • O
      openvas
      last edited by

      I have just installed pfSense and I cannot make the NAT work
      The linux host has a web server on it that works.

      Setup in VMware Workstation:

      win host(192.168.30.130/24)  > pfSense > linux host (192.168.20.128/24)

      pfSense WAN = EM0 (192.168.30.100)
      pfSense LAN = EM1 (192.168.20.100)

      Troubleshooting:

      • from pfSense EM1 telnet -b em1ipaddress linuxhostipaddress 80 >>> successful
      • set pfSense to accept GUI connection from WAN interface ie. port 8080 >>> successful
      • set a firewall rule to allow ICMP to WAN address>>> successful, behavior change by switching the rule on and off
      • arp -a shows correct mac addresses of sources/destinations assigned to the respective interfaces EM0/EM1
      • default firewall rules to deny bogus networks and internal IANA address are disabled.

      The above should demonstrate that there are no network issues and the issue is in the internal routing.
      My NAT > Port forward rule is configured like this:

      Interface Protocol Source Address Source Ports Dest. Address Dest. Ports NAT IP NAT Ports
      WAN           TCP *              *                 WAN address 8080           192.168.20.128 80

      This creates a firewall rule as follows:
      Protocol Source Port Destination Port Gateway Queue Schedule
      IPv4TCP  *         *      192.168.20.128 80 (HTTP)         *      none

      What am I missing? Everything seems configured correctly

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        Exhaustive list of other things to check here.

        When it works from the same subnet but not from others it is almost always either the local firewall on the target or the default gateway of the target is wrong.

        https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.