Help need for SSH port forward for asterisk server

[shetu]

I need to open ssh port from wan side. Others port forward port ok but this server does not working. I stop Iptables and PortKnock service. Here is my pfsense screenshot.

[Grimson]

https://docs.netgate.com/pfsense/en/latest/nat/port-forward-troubleshooting.html follow all the steps and you will find where the problem is.

[johnpoz]

why are you showing outbound nat for a port forward?

But 192/8 not valid that is for freaking sure..

[shetu]

Outband Nat does not need for simple port forward?

[johnpoz]

Why would you need to adjust outbound for an inbound port forward??

That you have it set to manual and have 192/8 points to someone needs to RTFM to start with ;)

Amost ALWAYS!!! The outbound nat would be automatic or hybrid.. If you think you need to change it to manual you prob should rethink what your doing and ask before changing it...

Let me guess you read some "guide" on how to setup a vpn client...

[shetu]

Your guess right. It was for vpn client.

[johnpoz]

And wrong - there is ZERO reason to setup manual outbound nat for a vpn client.. Hybrid works just fine..

And this guide told you to use 192/8??

Are you actually using 192.0.0.0/8 as your local network? You confuse 192.168/16 rfc1918 space with 10/8 space?

[shetu]

@johnpoz Not really. My lan is 192.244.11.39/24

[Rico]

As johnpoz already told you, 192.244.11.0/24 is no valid private network.

RFC1918:
10.0.0.0 to 10.255.255.255
172.16.0.0 to 172.31.255.255
192.168.0.0 to 192.168.255.255

-Rico

[Derelict]

@rico said in Help need for SSH port forward for asterisk server:

RFC1918:
10.0.0.0 to 10.255.255.255
172.16.0.0 to 172.31.255.255
192.168.0.0 to 192.168.255.255

Also can be described as:

10.0.0.0/8
172.16.0.0/12
192.168.0.0/16

[shetu]

Thanks for you valuable opinion.

[Derelict]

it is not an opinion. It is fact.

[Rico]

Yes or
10/8
172.16/12
192.168/16

...I just wanted to post a bit more "human readable". ;-)

-Rico