unable to access webserver with static ip and port from pfsense only

viragomann

@Samuelking
As there are no relating packets on WAN, sniff on LAN with filtering to the destination port only, to get sure, that the packets even are routed to pfSense.

Possibly your testing device uses not pfSense as upstream gateway.

Gertjan

@Samuelking

Normally, packet capturing isn't even needed.

Here are my WAN firewall rules, some of them are part of a NAT rule :

For example (the line marked green), is not a web server (port 80 or 443) but a SSH server on port 22, my diskstation ( = alias diskstation2), living on my LAN, IP 192.168.1.32.

You see the counters marked green ? That means traffic was handled by that rule, which means matching traffic, send to my diskstation2 device, entered the WAN interface.

Is your WAN IP a RFC1918 or not ?

johnpoz

@Gertjan I thought he was going outbound to something on the internet.. Not inbound from the internet to pfsense.

@Samuelking your on a client behind pfsense.. And your trying to go to what public IP, please pm me this IP your trying to go to... Or are you trying to let people out on the internet get to some server your running behind pfsense on this port?

If your trying to go outbound to the internet - sniff on the lan side interface do you see your client send the traffic? So you see the traffic get to pfsense lan interface?

Samuelking

@Gertjan you were right i am trying to access a webserver on th internet has ip address with port from my network i was using tplink router it was (and is working fine can access webserver when remove pfsense) now i want to change my router to pfsense so that i have more advance features, every is working great can access any every thing but only this webserver causing issues pfsense.

Gertjan

@Samuelking

Make sure that the WAN IP pfSesne is using is the same one as the TPlonk was using ....
( if possible )

johnpoz

@Samuelking said in unable to access webserver with static ip and port from pfsense only:

i am trying to access a webserver on th internet has ip address with port from my network

So you are trying to do a reflection. This IP is your wan IP of pfsense, and your hitting it from some client behind pfsense - and you want to be forwarded to some rfc1918 address on your network..

This is handled with split dns - there really is little reason to hit your public IP if the ip is the box next you on the same network.. Or you have to setup nat reflection.