NAT-T port and firewall
-
I dint' have need for that option before but for one new site. Provider is a bit restrictive and allows me only 5 ports forwarded to local IP address and if I need more it is charged massively. So I forwarded 80 TCP, 433 TCP, 500 UDP and 4500 UDP. I always use IPSec for communication with inside servers/computers. This time I have run into problem. When I have configured mobile client as always I wasn't capable connecting to pfSense. When I have checked logs I have found that firewall is blocking traffic to port 4500.
My question is: Isn't opening that port done automatically from script when I check Enable NAT-T? If it isn't the, for all other users this is remainder ALLOW UDP traffic to port 4500 on WAN interface if you expect NAT-T traffic.
(version used 1.2.3-PRERELEASE-TESTING-VERSION built on Sat Mar 7 12:42:58 EST 2009 )Sasa