Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    What ports are usable?

    Scheduled Pinned Locked Moved General pfSense Questions
    13 Posts 4 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      SteveITS Galactic Empire @cheapie408
      last edited by

      @cheapie408 generally you can use any port. Is this using NAT? Can you post the rule?

      Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
      When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
      Upvote ๐Ÿ‘ helpful posts!

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @cheapie408
        last edited by

        @cheapie408 You can use any port not already being used, and that is allowed by say a firewall in front..

        So did you change the port on the device from say 82 to 8282, or are you forwarding 8282 to just 82?

        Also is there maybe a router in front of pfsense, and 82 was forward, and now you need to forward 8282 on that device?

        As mentioned without seeing exactly what you have setup, its hard to help point out what might not be right.

        Also with any port forwarding just go through the troubleshooting guide

        https://docs.netgate.com/pfsense/en/latest/troubleshooting/nat-port-forwards.html#troubleshooting-nat-port-forwards

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        C 1 Reply Last reply Reply Quote 0
        • C
          cheapie408 @johnpoz
          last edited by

          @johnpoz

          I changed my application to 8282 and forwarded 8282 to 8282

          5f6cf297-3655-468f-a83d-b5fda2ef2a3f-image.png

          S 1 Reply Last reply Reply Quote 0
          • S
            SteveITS Galactic Empire @cheapie408
            last edited by

            @cheapie408 in a NAT rule destination is typically the WAN address. Redirect Target IP is the lan IP of the server.

            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
            Upvote ๐Ÿ‘ helpful posts!

            C 1 Reply Last reply Reply Quote 0
            • C
              cheapie408 @SteveITS
              last edited by cheapie408

              @steveits 192.168.1.5 is the server address and on port 8282.

              If I change it to 82 and change my application port to 82 it works fine.

              Here's an example, I just create a rule for 8181.
              Port 81 is blue iris. when I go to BI and update it's webserver port to 8181 it doesn't work, when I change it back to 81 then it works.

              8615e38b-e87b-4e9a-90a6-55a91e28f14a-image.png

              S GertjanG 2 Replies Last reply Reply Quote 0
              • S
                SteveITS Galactic Empire @cheapie408
                last edited by

                @cheapie408 Dies it work across the LAN? Is there a firewall on the server that needs updating?

                Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                Upvote ๐Ÿ‘ helpful posts!

                C 1 Reply Last reply Reply Quote 0
                • C
                  cheapie408 @SteveITS
                  last edited by

                  @steveits

                  no issues accessing it internally

                  9b79b8ff-9653-4bb9-95f5-f3cca613044a-image.png

                  S 1 Reply Last reply Reply Quote 0
                  • S
                    SteveITS Galactic Empire @cheapie408
                    last edited by

                    @cheapie408 Did you go through the troubleshooting doc?

                    Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                    When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                    Upvote ๐Ÿ‘ helpful posts!

                    C 1 Reply Last reply Reply Quote 0
                    • C
                      cheapie408 @SteveITS
                      last edited by

                      @steveits which troubleshooting doc? Didn't even know there was one.

                      FWIW even using the working rules just changing the port # does me no good. I've even tried other unused port on my network and no go.

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @cheapie408
                        last edited by

                        @cheapie408 the one I linked too in my first post in this thread..

                        https://docs.netgate.com/pfsense/en/latest/troubleshooting/nat-port-forwards.html

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • GertjanG
                          Gertjan @cheapie408
                          last edited by

                          @cheapie408

                          Is this your WAN interface :

                          e6b37905-3802-4c00-af52-0e3286ce3ad0-image.png

                          ?

                          If so : as you can see, TCP traffic with destination "82" got redirected.
                          Same thing for TCP traffic on port "81".
                          But no port 8181 traffic (TCP) was coming into firewall. And if traffic doesn't reach pfSens, it can't redirect (NAT) it ;)

                          Is there a router/firewall before your pfSense ? And if so : You've set up a NAT on that router also ?

                          No "help me" PM's please. Use the forum, the community will thank you.
                          Edit : and where are the logs ??

                          1 Reply Last reply Reply Quote 0
                          • C
                            cheapie408
                            last edited by cheapie408

                            @gertjan
                            I think I just did the biggest brain fart ever. I feel like an idiot. I created the firewall rule but didn't create the NAT rule for the port forward. I got it figured out! THANK YOU EVERYONE!

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.