Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login
    Introducing Netgate Nexus: Multi-Instance Management at Your Fingertips.

    Unable to forward port 22, SSH from outside

    Scheduled Pinned Locked Moved General pfSense Questions
    3 Posts 2 Posters 1.3k Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C Offline
      cuteliquid11
      last edited by

      Hi All 🖐,

      For the support needs I need to let PBX tech to SSH to my locally hosted FreePBX temporarily to resolve some issue. I allowed access from their support network only in the rule. Yet the connection times out. Today, I tried to connect from my client network, I put their IP in the alias, and the same issue. Seems like that packets don’t hit the Pfsense.

      I have other rules that work fine.

      It could be FreePBX issue to but I allowed IP and allowed SSH over internet in the it firewall.

      Can anyone suggest where to look?

      Here are my forwarding rule and WAN interface rules:
      73fb3031-6348-42ee-b581-87b8ce66c54a-image.png

      75539375-bfa9-4631-8a74-1331c0caef76-image.png

      luckman212L 1 Reply Last reply Reply Quote 0
      • luckman212L Offline
        luckman212 LAYER 8 @cuteliquid11
        last edited by luckman212

        @cuteliquid11 source port will not be 22... change the source port to "Any"

        also, dest IP in your NAT rule should probably be your WAN IP, looks like you have the internal FreePBX IP there, which isn't right

        C 1 Reply Last reply Reply Quote 2
        • C Offline
          cuteliquid11 @luckman212
          last edited by

          @luckman212 It worked, thanks man. I copied this rule from my other rules, I have quite a bit, and they work okay...
          I think I confused nomenclature of names - dest address is my internet host place rather than behind NAT object.

          1 Reply Last reply Reply Quote 1
          • First post
            Last post
          Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.