Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Port Forwarding ESXi VM no joy !

    Scheduled Pinned Locked Moved General pfSense Questions
    27 Posts 2 Posters 2.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      You are testing from inside the network, the source IP is 192.168.15.39.

      You have to test from outside the network to hit a port forward on WAN. If you need that to work from the LAN side you have to enable NAT reflection. And it looks like you must have done that since it is redirecting but you have not set 'Enable automatic outbound NAT for Reflection' in Sys > Adv > Firewall&NAT. And that means the server is replying directly to the client creating an asymmetric route.

      Enable that or test from an external IP address.

      Steve

      D 1 Reply Last reply Reply Quote 0
      • D
        dhenzler @stephenw10
        last edited by dhenzler

        @stephenw10
        states_test.png
        my server isn't on 240...? 240 is the ring doorbell...

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Ok, then the wrong port forward rule is catching it. Possibly a 1:1 rule but port forwards override those if they match.

          Let's see you port forwards.

          Steve

          D 1 Reply Last reply Reply Quote 0
          • D
            dhenzler @stephenw10
            last edited by

            @stephenw10
            Changed the order put doorbell last...
            states_test.png

            D 3 Replies Last reply Reply Quote 0
            • D
              dhenzler @dhenzler
              last edited by dhenzler

              @dhenzler

              Thank you for your perseverance... It restores my faith in use of support forums.

              BSD is way quicker than using Linux Mint Apache... now to see if I have VHosts set up properly I'll have to move it over to port 80 and call up a website...

              1 Reply Last reply Reply Quote 0
              • D
                dhenzler @dhenzler
                last edited by

                @dhenzler

                Woo Hoo... it works !

                D 1 Reply Last reply Reply Quote 0
                • D
                  dhenzler @dhenzler
                  last edited by dhenzler

                  @dhenzler

                  One of my old websites... no longer in business

                  nc_test.png

                  1 Reply Last reply Reply Quote 0
                  • D
                    dhenzler @dhenzler
                    last edited by

                    @dhenzler

                    Many thanks Steve for all of your assistance. Wouldn't have ever found the rule order issue if it wasn't for you...

                    1 Reply Last reply Reply Quote 1
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      No worries, glad you got it working. 👍

                      D 1 Reply Last reply Reply Quote 0
                      • D
                        dhenzler @stephenw10
                        last edited by

                        @stephenw10

                        I have dropped out of many groups because members reply with a redirection in effort instead of working a problem. One fellow asked why I wasn't using a VPN to access my web content. I explained that the purpose of the website was for public use, not private. Or one fellow suggested I change from ESXi to ProxMox... Naw... too complicated for my purposes, and it means starting over from ground up.

                        I have enjoyed pfSense and need to be sure I've got it set up to give me maximum protection. One fella said Port Forwarding was risky as it opens you up to hackers. Well yeah, I knew the apps would be at risk. That's why I use ESXi, and backup my VM's. Get hacked... dump and replace...

                        My next job is to configure the email blocking that is provided under "feeds".

                        Thank you Steve

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.