Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Webgui from WAN not working

    Scheduled Pinned Locked Moved webGUI
    6 Posts 3 Posters 738 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bigdessert
      last edited by

      I am not sure why this is not working but I am trying to enable access to the webGUI from external.

      Admin is set to HTTPS on default 443.

      I created a WAN rule to allow access from my IP address as shown below

      1c1e86ed-4998-47f3-bb3a-ea17553b16da-image.png

      If I packet capture I can see the traffic making it in but do not see any return traffic.

      0083a689-fc07-4be3-91c3-a23f1afbf564-image.png

      The other port forwards in the firewall work fine for remotely accessing those devices so not sure what is blocking. Please help!

      M S 2 Replies Last reply Reply Quote 0
      • M
        michmoor LAYER 8 Rebel Alliance @bigdessert
        last edited by

        @bigdessert I assume you have a route back to that IP?
        If you go to Diagnostics / Routes. Either you are matching the default or you have another entry there for that source IP?

        Firewall: NetGate,Palo Alto-VM,Juniper SRX
        Routing: Juniper, Arista, Cisco
        Switching: Juniper, Arista, Cisco
        Wireless: Unifi, Aruba IAP
        JNCIP,CCNP Enterprise

        1 Reply Last reply Reply Quote 0
        • B
          bigdessert
          last edited by

          Yes it should be matching the default route.

          2c04c842-3e17-42cf-aff9-2194b6b3318b-ScreenConnect.WindowsClient_vRJyotYsrT.png

          1 Reply Last reply Reply Quote 0
          • S
            SteveITS Galactic Empire @bigdessert
            last edited by

            @bigdessert We do this a lot, from our office IP to client routers. The rule is all that is necessary. The 23 KiB also indicates the packets are matching the rule. There's something else going on if it's not working. Is there a NAT rule for 443, maybe?

            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
            Upvote 👍 helpful posts!

            1 Reply Last reply Reply Quote 0
            • B
              bigdessert
              last edited by

              No there is no NAT rule for 443. I have also tried changing the webGUI port and still have the same issue.

              1 Reply Last reply Reply Quote 0
              • B
                bigdessert
                last edited by

                I just resolved this. My provider provides a static IP address but said we can leave our router at DHCP assignment and it will pull that static. Well apparently if it is DHCP assigned it was blocking traffic. I changed it to static on the netgate and now it is passing the traffic.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.