• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Port forwarding doesn't work

Scheduled Pinned Locked Moved NAT
37 Posts 4 Posters 2.4k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • ?
    A Former User
    last edited by Nov 30, 2023, 4:41 PM

    This post is deleted!
    V 1 Reply Last reply Nov 30, 2023, 4:47 PM Reply Quote 0
    • V
      viragomann @A Former User
      last edited by Nov 30, 2023, 4:47 PM

      @taylorswift
      Stating a source port is almost always a bad idea. Generally clients use random source ports.

      ? 1 Reply Last reply Nov 30, 2023, 4:54 PM Reply Quote 0
      • ?
        A Former User @viragomann
        last edited by Nov 30, 2023, 4:54 PM

        @viragomann
        I changed it, but it still doesn't work.
        020d1db9-dd9f-4049-8be8-7ea59cc59645-image.png

        V 1 Reply Last reply Nov 30, 2023, 4:58 PM Reply Quote 0
        • V
          viragomann @A Former User
          last edited by Nov 30, 2023, 4:58 PM

          @taylorswift
          Check if the rules get hits now.

          ? 1 Reply Last reply Nov 30, 2023, 5:13 PM Reply Quote 0
          • ?
            A Former User @viragomann
            last edited by Nov 30, 2023, 5:13 PM

            @viragomann
            No, it's still not working

            B V 2 Replies Last reply Nov 30, 2023, 5:16 PM Reply Quote 0
            • B
              Bob.Dig LAYER 8 @A Former User
              last edited by Bob.Dig Nov 30, 2023, 5:17 PM Nov 30, 2023, 5:16 PM

              @taylorswift Maybe doing all at once, learning pfSense, learning proxmox, is a little bit much? Your port forward looks good now, so it is not a pfSense issue.

              1 Reply Last reply Reply Quote 0
              • V
                viragomann @A Former User
                last edited by Nov 30, 2023, 5:19 PM

                @taylorswift
                So you presumably don't get any packets in.
                You have to check some things then.

                Do you have a real public WAN IP on pfSense?
                Do you have a router in front of it?

                Does you provider block access to you?

                What is the concrete role of Cloudflare here?

                ? 1 Reply Last reply Nov 30, 2023, 6:18 PM Reply Quote 0
                • ?
                  A Former User @viragomann
                  last edited by A Former User Nov 30, 2023, 6:21 PM Nov 30, 2023, 6:18 PM

                  @viragomann

                  I think yes, but i'm not sure (i use pppoe to connect with ISP)

                  No

                  No

                  I don't want to show my IP to website visitors

                  V 1 Reply Last reply Nov 30, 2023, 6:58 PM Reply Quote 0
                  • V
                    viragomann @A Former User
                    last edited by Nov 30, 2023, 6:58 PM

                    @taylorswift
                    So you have the pppoe IP on pfSense.

                    Just check your IP by using a web service, e.g. https://www.whatismyip.com.tw and compare it with the pfSense WAN.
                    If both show equal IPs, you can go on.

                    Then go to a port check service (https://portchecker.co), enter your IP and 443 as port and check if it's open.

                    If it's open, check your Cloudfare settings, whatever it does...
                    If the port is closed, go your WAN rules and verify if the port 443 was hit.

                    ? 1 Reply Last reply Nov 30, 2023, 7:04 PM Reply Quote 0
                    • ?
                      A Former User @viragomann
                      last edited by A Former User Nov 30, 2023, 7:04 PM Nov 30, 2023, 7:04 PM

                      @viragomann said in Port forwarding doesn't work:

                      Just check your IP by using a web service, e.g. https://www.whatismyip.com.tw and compare it with the pfSense WAN.
                      If both show equal IPs, you can go on.

                      It's the same.

                      @viragomann said in Port forwarding doesn't work:

                      Then go to a port check service (https://portchecker.co), enter your IP and 443 as port and check if it's open.

                      It's closed.

                      @viragomann said in Port forwarding doesn't work:

                      If the port is closed, go your WAN rules and verify if the port 443 was hit.

                      I don't really understand what I should do. Could you tell more about this?

                      V 1 Reply Last reply Nov 30, 2023, 7:13 PM Reply Quote 0
                      • V
                        viragomann @A Former User
                        last edited by Nov 30, 2023, 7:13 PM

                        @taylorswift
                        23faf8b5-ac37-4321-a999-b9d25d13223a-grafik.png

                        This shows the current states and the bytes count. You see at least some bytes there.

                        ? 1 Reply Last reply Nov 30, 2023, 7:15 PM Reply Quote 0
                        • ?
                          A Former User @viragomann
                          last edited by A Former User Nov 30, 2023, 7:16 PM Nov 30, 2023, 7:15 PM

                          @viragomann
                          I don't see anything. There are no states on both 80 and 443 port.
                          718f5e6a-7b48-4b5f-8968-5fae55feeeda-image.png

                          V 1 Reply Last reply Nov 30, 2023, 7:18 PM Reply Quote 0
                          • V
                            viragomann @A Former User
                            last edited by Nov 30, 2023, 7:18 PM

                            @taylorswift
                            I'm not expecting to see any state if the port is shown up as closed.
                            I was requesting the bytes.

                            ? 3 Replies Last reply Nov 30, 2023, 7:20 PM Reply Quote 0
                            • ?
                              A Former User @viragomann
                              last edited by Nov 30, 2023, 7:20 PM

                              This post is deleted!
                              1 Reply Last reply Reply Quote 0
                              • ?
                                A Former User @viragomann
                                last edited by Nov 30, 2023, 7:27 PM

                                @viragomann
                                Still i don't see any bytes, but if blocking rule bytes changed, i think there is something wrong with port forwarding settings
                                9c8a826d-5de4-487f-8e4d-2ca6baca5d6b-image.png

                                V 1 Reply Last reply Nov 30, 2023, 7:36 PM Reply Quote 0
                                • ?
                                  A Former User @viragomann
                                  last edited by Nov 30, 2023, 7:30 PM

                                  @viragomann
                                  If it is helpful i set some settings from this website: https://nguvu.org/pfsense/pfsense-baseline-setup/

                                  1 Reply Last reply Reply Quote 0
                                  • V
                                    viragomann @A Former User
                                    last edited by Nov 30, 2023, 7:36 PM

                                    @taylorswift
                                    If you probed port 443 you should see any bytes on this rule.

                                    Since there is nothing, I'd consider to check your Cloudflare settings. I suspect, you have activated it's tunnel or proxy or whatever.

                                    ? 1 Reply Last reply Nov 30, 2023, 7:38 PM Reply Quote 0
                                    • ?
                                      A Former User @viragomann
                                      last edited by Nov 30, 2023, 7:38 PM

                                      @viragomann
                                      I'll check this, but why it shows that the ports are closed on port checker website?

                                      V J 2 Replies Last reply Nov 30, 2023, 7:44 PM Reply Quote 0
                                      • V
                                        viragomann @A Former User
                                        last edited by Nov 30, 2023, 7:44 PM

                                        @taylorswift
                                        I assume, there is no packet arriving on your WAN.

                                        You can sniff the WAN traffic with Diagnostic > Packet Capture, while doing a port check, or just try yourself to access your IP from outside by https://<yourIP>.
                                        You should see at least any packet.

                                        If not, possibly access is blocked by your ISP.

                                        1 Reply Last reply Reply Quote 0
                                        • J
                                          johnpoz LAYER 8 Global Moderator @A Former User
                                          last edited by johnpoz Nov 30, 2023, 7:55 PM Nov 30, 2023, 7:54 PM

                                          @taylorswift because it go no reply is why it would show closed.. Very first thing you should do in troubleshooting a port forward is go to like can you see me . org.. Put in the port you want, and then sniff on your pfsense wan - do you see this traffic if not, then nothing you do on pfsense is going to get a port forward to work.

                                          portforward.jpg

                                          If you don't see that traffic hit pfsense via the packet capture under diagnostics - nothing you do on pfsense would ever get a port forward to work.

                                          You might behind another nat device? What is in front of pfsense? Maybe you don't even have a public IP, ie cgnat from your isp and not just a natting device in front. If you have another isp device in front of pfsense you need to forward the traffic to pfsense wan IP so your port forwards on pfsense can work. Your rules not triggering screams the traffic is not getting to pfsense.

                                          if port forwarding didn't work the forums would be a blaze with people complaining - it would be like a ddos attack ;)

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                                          ? 1 Reply Last reply Nov 30, 2023, 8:03 PM Reply Quote 0
                                          20 out of 37
                                          • First post
                                            20/37
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received