Can't Hit Port Forward From Inside LAN
-
I work as a network engineer but am not particularly familiar with pfsense.
I have a port forward from my Public IP:80 ---->192.168.1.5:80, but I can't figure out why if I type in my public IP address from inside the LAN I end up at 192.168.1.1:80 instead. It works fine outside the LAN. I would assume maybe pfsense is not forwarding the traffic out to the internet and coming back in maybe it is taking a quicker route without going through the WAN gateway or something. If anyone has any ideas please let me know!
-
@zxvrra
The port forwarding does not work from inside, cause the NAT rule is defined on the WAN interface. So it only is applied to traffic coming in on WAN.If you want to access the public IP from inside you can enable NAT reflection in the NAT rule. If client and server are connected to the same network interface you might have to use "NAT + proxy" mode.
If you use a host name to access the server, it's recommended to add a DNS override for it instead.
-
Also, in System/Advanced/Firewall & NAT ensure reflection is enabled in general.
-
@steveits said in Can't Hit Port Forward From Inside LAN:
Also, in System/Advanced/Firewall & NAT ensure reflection is enabled in general.
This enables NAT reflection globally, so that it's enabled by default in all NAT rules:
Possibly that is not always desired and it's not necessary to enable it for a single forwarding rule.
-
@viragomann said in Can't Hit Port Forward From Inside LAN:
not necessary to enable it for a single forwarding rule
Did not realize that, thanks.