access local server via wan ip

[patelsaheb]

Hello

my scenario is like below
have one local web server linux example ip is 192.168.1.111 i want to access it via wan ip of pfsense

so how can i rules configure in pfsense
any one have demo snapshot to follow same kind of scenario

[johnpoz]

https://docs.netgate.com/pfsense/en/latest/nat/forwarding-ports-with-pfsense.html

I assume you mean while your outside your network... And not while your actually on the same network - which would be nat reflection.

[patelsaheb]

@johnpoz
yes
is there any snapshot to configure nat??

thank you..

[johnpoz]

Here is better doc link
https://docs.netgate.com/pfsense/en/latest/book/nat/port-forwards.html

With pictures!

[patelsaheb]

@johnpoz

have configured same but not able to open

have one floating rule added on 80 and have access pfsense in local via 80 port
currently on wan ip ip pfsense open.
so is there any problem?

[johnpoz]

https://docs.netgate.com/pfsense/en/latest/nat/port-forward-troubleshooting.html

First thing I would start with is sniff on your wan to validate the traffic is actually hitting your wan IP from the internet.. canyouseeme.org is great for this sort of test.

You should really just let the nat (port forward) create the wan rule for you - which is the default.

[stephenw10]

Show us a screenshot of your port forward rules and WAN firewall rules if it's still not working.

Steve

[patelsaheb]

@stephenw10

please check snaps
thank you

[Derelict]

@patelsaheb Don't set a source port.

You don't need floating rules. delete them.

[patelsaheb]

@Derelict
have removed source port still not able to access
can you please check floating rules which was shared in snaps

[Derelict]

No floating rules are necessary. Don't over-think it.

[patelsaheb]

@Derelict

Yes now its working perfect thank you.

[patelsaheb]

@Derelict

can you check snap is it correct or not?

[patelsaheb]

Hello

how can i access 3389 port of local server over the wan ip remotely..
also want to open few port that can access over remote via wan ip.

thank you..

[patelsaheb]

Hello

Is there any way that i can access wan ip from my local network

[johnpoz]

@patelsaheb said in access local server via wan ip:

Is there any way that i can access wan ip from my local network

Why would you need to do that, just access the local IP.. setup a host override to resolve whatever fqdn you want to the local IP vs doing nat reflection.

If you insist on doing such nonsense - then you have to enable and setup nat reflection.