• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Firewall will forward RDP but not anything else

Scheduled Pinned Locked Moved Firewalling
19 Posts 3 Posters 599 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • M
    michmoor LAYER 8 Rebel Alliance @NotJohn
    last edited by michmoor Dec 7, 2022, 8:38 PM Dec 7, 2022, 8:37 PM

    @notjohn Have you allowed RDP through firewall rules?
    If so do you see that rule being hit in the system log?
    Provide screenshots.

    Firewall: NetGate,Palo Alto-VM,Juniper SRX
    Routing: Juniper, Arista, Cisco
    Switching: Juniper, Arista, Cisco
    Wireless: Unifi, Aruba IAP
    JNCIP,CCNP Enterprise

    N 1 Reply Last reply Dec 7, 2022, 9:04 PM Reply Quote 0
    • N
      NotJohn @michmoor
      last edited by Dec 7, 2022, 9:04 PM

      @michmoor I dont see the rule being hit on my system log but i can rdp into my public IP so its open and i can scan to see that its open

      M 1 Reply Last reply Dec 7, 2022, 9:05 PM Reply Quote 0
      • M
        michmoor LAYER 8 Rebel Alliance @NotJohn
        last edited by Dec 7, 2022, 9:05 PM

        @notjohn When you scan for 25565, is it open? If its not then there is a good chance you have no firewall rule for it.

        Firewall: NetGate,Palo Alto-VM,Juniper SRX
        Routing: Juniper, Arista, Cisco
        Switching: Juniper, Arista, Cisco
        Wireless: Unifi, Aruba IAP
        JNCIP,CCNP Enterprise

        N 1 Reply Last reply Dec 7, 2022, 9:06 PM Reply Quote 0
        • N
          NotJohn @michmoor
          last edited by Dec 7, 2022, 9:06 PM

          @michmoor 95660958-b4d2-4bdc-a9a2-90821f7828a0-image.png

          But i do
          d21e7d68-d2c3-4373-a2a1-0c7194fb4f8f-image.png

          They match perfectly

          N 1 Reply Last reply Dec 7, 2022, 9:10 PM Reply Quote 0
          • N
            NotJohn @NotJohn
            last edited by Dec 7, 2022, 9:10 PM

            @notjohn
            and this shows what im seeing when i check the port
            043224ae-1344-4023-a50c-1f8eb8d2db4a-image.png
            but then 25565
            4f2af091-7183-4595-b2a6-1a4dc782ddcf-image.png

            same thing happens when using a 3rd party tester

            M 1 Reply Last reply Dec 7, 2022, 9:12 PM Reply Quote 0
            • M
              michmoor LAYER 8 Rebel Alliance @NotJohn
              last edited by Dec 7, 2022, 9:12 PM

              @notjohn ahhhhh ok the last screen shot is the one i like
              Doesnt seem that port 25565 is open on the server.

              On the server run the following
              netstat -ano | findstr 25565

              If the port is listening my second question is do you have Windows Firewall enabled.

              Firewall: NetGate,Palo Alto-VM,Juniper SRX
              Routing: Juniper, Arista, Cisco
              Switching: Juniper, Arista, Cisco
              Wireless: Unifi, Aruba IAP
              JNCIP,CCNP Enterprise

              N 2 Replies Last reply Dec 7, 2022, 9:13 PM Reply Quote 0
              • N
                NotJohn @michmoor
                last edited by Dec 7, 2022, 9:13 PM

                @michmoor i turned off my windows firewall to solve this and it has not been turned back on yet

                M 1 Reply Last reply Dec 7, 2022, 9:14 PM Reply Quote 0
                • M
                  michmoor LAYER 8 Rebel Alliance @NotJohn
                  last edited by michmoor Dec 7, 2022, 9:15 PM Dec 7, 2022, 9:14 PM

                  @notjohn
                  On the server run the following
                  netstat -ano | findstr 25565

                  Is the port listening?

                  edit: Turning off windows firewall resolved this?

                  Firewall: NetGate,Palo Alto-VM,Juniper SRX
                  Routing: Juniper, Arista, Cisco
                  Switching: Juniper, Arista, Cisco
                  Wireless: Unifi, Aruba IAP
                  JNCIP,CCNP Enterprise

                  1 Reply Last reply Reply Quote 0
                  • N
                    NotJohn @michmoor
                    last edited by Dec 7, 2022, 9:16 PM

                    @michmoor
                    33906774-cce5-4d8f-aa83-0cddad48b580-image.png

                    M 1 Reply Last reply Dec 7, 2022, 9:16 PM Reply Quote 0
                    • M
                      michmoor LAYER 8 Rebel Alliance @NotJohn
                      last edited by Dec 7, 2022, 9:16 PM

                      @notjohn you execute the command on your Windows box - the same one you have RDP enabled on.

                      Firewall: NetGate,Palo Alto-VM,Juniper SRX
                      Routing: Juniper, Arista, Cisco
                      Switching: Juniper, Arista, Cisco
                      Wireless: Unifi, Aruba IAP
                      JNCIP,CCNP Enterprise

                      N 1 Reply Last reply Dec 7, 2022, 9:19 PM Reply Quote 0
                      • N
                        NotJohn @michmoor
                        last edited by Dec 7, 2022, 9:19 PM

                        @michmoor so i need to run this directly on the server's shell?

                        M 1 Reply Last reply Dec 7, 2022, 9:20 PM Reply Quote 0
                        • M
                          michmoor LAYER 8 Rebel Alliance @NotJohn
                          last edited by Dec 7, 2022, 9:20 PM

                          @notjohn Yes.
                          For example on my Windows 10 client

                          netstat -ano | findstr 5353
                            UDP    0.0.0.0:5353           *:*                                    16988
                            UDP    0.0.0.0:5353           *:*                                    16988
                            UDP    0.0.0.0:5353           *:*                                    21312
                            UDP    0.0.0.0:5353           *:*                                    21312
                            UDP    0.0.0.0:5353           *:*                                    3424
                            UDP    0.0.0.0:5353           *:*                                    21312
                            UDP    0.0.0.0:5353           *:*                                    16988
                            UDP    192.168.40.1:5353      *:*                                    3100
                            UDP    192.168.50.241:5353    *:*                                    3100
                            UDP    192.168.80.1:5353      *:*                                    3100
                            UDP    [::1]:5353             *:*                                    3100
                          
                          

                          Firewall: NetGate,Palo Alto-VM,Juniper SRX
                          Routing: Juniper, Arista, Cisco
                          Switching: Juniper, Arista, Cisco
                          Wireless: Unifi, Aruba IAP
                          JNCIP,CCNP Enterprise

                          N 1 Reply Last reply Dec 7, 2022, 9:24 PM Reply Quote 0
                          • N
                            NotJohn @michmoor
                            last edited by Dec 7, 2022, 9:24 PM

                            @michmoor fc732572-f9f8-4ef6-b503-a4ed7f10fbf4-image.png
                            the above is my test on 3389 so no its not listening for 25565

                            M 1 Reply Last reply Dec 7, 2022, 9:26 PM Reply Quote 0
                            • M
                              michmoor LAYER 8 Rebel Alliance @NotJohn
                              last edited by Dec 7, 2022, 9:26 PM

                              @notjohn hence your problem. Im not a minecraft expert here so dont know why your application isn't listening on the intended port but PFsense is not at fault.

                              Firewall: NetGate,Palo Alto-VM,Juniper SRX
                              Routing: Juniper, Arista, Cisco
                              Switching: Juniper, Arista, Cisco
                              Wireless: Unifi, Aruba IAP
                              JNCIP,CCNP Enterprise

                              N 1 Reply Last reply Dec 7, 2022, 9:29 PM Reply Quote 0
                              • N
                                NotJohn @michmoor
                                last edited by Dec 7, 2022, 9:29 PM

                                @michmoor seems strange though because its just a port to open its not specific to minecraft, just the default port the game uses, so the fact it isnt getting through is fishy

                                M 1 Reply Last reply Dec 7, 2022, 9:32 PM Reply Quote 0
                                • M
                                  michmoor LAYER 8 Rebel Alliance @NotJohn
                                  last edited by Dec 7, 2022, 9:32 PM

                                  @notjohn Im not sure you understand whats happening here.
                                  The port is not open on your server. If the port is not open then why expect any outside connections to it to work?
                                  Port 3389 is open on your server. The port is allowed on the firewall. Hence RDP is working.
                                  Port 25565 is not open on your server. The port is allowed on the firewall. How can traffic be redirected to a port thats not open? You need to fix that.
                                  Not a pfsense issue

                                  Firewall: NetGate,Palo Alto-VM,Juniper SRX
                                  Routing: Juniper, Arista, Cisco
                                  Switching: Juniper, Arista, Cisco
                                  Wireless: Unifi, Aruba IAP
                                  JNCIP,CCNP Enterprise

                                  1 Reply Last reply Reply Quote 0
                                  13 out of 19
                                  • First post
                                    13/19
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                    This community forum collects and processes your personal information.
                                    consent.not_received