NAT rule is not working
-
I have just installed pfSense and I cannot make the NAT work
The linux host has a web server on it that works.Setup in VMware Workstation:
win host(192.168.30.130/24) > pfSense > linux host (192.168.20.128/24)
pfSense WAN = EM0 (192.168.30.100)
pfSense LAN = EM1 (192.168.20.100)Troubleshooting:
- from pfSense EM1 telnet -b em1ipaddress linuxhostipaddress 80 >>> successful
- set pfSense to accept GUI connection from WAN interface ie. port 8080 >>> successful
- set a firewall rule to allow ICMP to WAN address>>> successful, behavior change by switching the rule on and off
- arp -a shows correct mac addresses of sources/destinations assigned to the respective interfaces EM0/EM1
- default firewall rules to deny bogus networks and internal IANA address are disabled.
The above should demonstrate that there are no network issues and the issue is in the internal routing.
My NAT > Port forward rule is configured like this:Interface Protocol Source Address Source Ports Dest. Address Dest. Ports NAT IP NAT Ports
WAN TCP * * WAN address 8080 192.168.20.128 80This creates a firewall rule as follows:
Protocol Source Port Destination Port Gateway Queue Schedule
IPv4TCP * * 192.168.20.128 80 (HTTP) * noneWhat am I missing? Everything seems configured correctly
-
Exhaustive list of other things to check here.
When it works from the same subnet but not from others it is almost always either the local firewall on the target or the default gateway of the target is wrong.
https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting