Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    port forward help

    Scheduled Pinned Locked Moved Official Netgate® Hardware
    6 Posts 2 Posters 702 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      netboy
      last edited by netboy

      Hi, I just got static IP from my ISP and everything is working fine.

      I have a DDNS something like xxxxx.ddns.net.

      I want to access my local IP 192.168.0.25 from outside my network. How do I do it?

      As an example when I use the following URL from outside my network: (I just made up the port 480)
      xxxxx.ddns.net.:480
      this should point to my local IP
      192.168.0.25

      I believe I have to configure firewall -> NAT. Not sure what entries - Can somebody help me?

      Right now when I type xxxxx.ddns.net I see my router login 192.168.0.1 and here is my current entry in firewall -> NAT - not sure what this entry is?

      7658f5a5-964c-43c8-b9f9-ce1d3b348b2c-image.png

      S 1 Reply Last reply Reply Quote 0
      • S
        SteveITS Galactic Empire @netboy
        last edited by

        @netboy See https://docs.netgate.com/pfsense/en/latest/nat/port-forwards.html

        for coming from the Internet:
        Interface = WAN
        Source = * (or a specific remote IP, or alias, etc.)
        Source Port = *
        Dest. Address = WAN
        Dest. Port = 480
        NAT IP =192.168.0.25
        NAT Ports = 480 (unless you want it to be different, say port 80)

        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
        Upvote 👍 helpful posts!

        N 1 Reply Last reply Reply Quote 0
        • N
          netboy @SteveITS
          last edited by

          @steveit screenshot below

          e4cfc27c-2d77-4704-8d28-1691277a8cd7-image.png

          I typed http://xxxxx.ddns.net:480 and was expecting in this example to load my local IP http://192.168.0.15 but not happens. Obviously I have made some mistake. Can you kindly have a look?

          S 1 Reply Last reply Reply Quote 0
          • S
            SteveITS Galactic Empire @netboy
            last edited by

            @netboy If you are on the pfSense LAN when you try you will need to enable reflection on the rule. Otherwise connections from LAN to WANIP:480 will be ignored.

            You wrote .25 above, is .15 correct?

            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
            Upvote 👍 helpful posts!

            N 1 Reply Last reply Reply Quote 0
            • N
              netboy @SteveITS
              last edited by netboy

              @steveits
              192.168.0.15 is correct!

              You said "enable reflection on the rule." - how do I do this?

              Do I need to select one of these?

              006a51bc-7ffe-445e-872f-b66fc3effd84-image.png

              N 1 Reply Last reply Reply Quote 0
              • N
                netboy @netboy
                last edited by

                @netboy Worked!

                As you pointed out I selected Enable (NAT + Proxy)

                Thanks again

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.