inbound stun traffic disappearing
-
Hi,
I have a pfsense and behind it I want to set up a stun/turn server. Via a VPN, there is a static IP and I have set up port forwarding for port 3478 to my server. And I have turned on logging for the respective rule.
When I use an online tool to scan that port, pfsense logs incoming traffic for this port and the stun server logs also show incoming traffic.
But when I use an online stun test tool, neither pfsense nor the stun server logs show any traffic. I have tried the online tool with other public stun servers and it actually does reach out to them (at least it claims that it was able to establish a connection). So the tool seems to work.
So how come the scan traffic is hitting the firewall and being passed to the stun server but the stun traffic is not? Does pfSense block stun traffic?
Thanks.
-
Just to prove to myself that I'm not a complete idiot, I have set up a VPS and installed eturnal there. It functions perfectly fine there. (It is not behind a pfsense but I have enabled ufw. To be fair, the setup in my home lab is much more complex than that of the VPS. But bottom line: I can set up eturnal to work. So it would seem to be my inability to configure pfsense.)