Forward connection to another external IP?

  • Is it possible to forward a connection to port 80 coming from WAN of the pfsense box to another server on the WAN interface?

    for example the domain of my pfsense box is but I want to point visitors of this adress to
    This should only apply to port 80 connections!

  • Rebel Alliance Developer Netgate

    No, not easily.

    You might be able to pull it off with some sort of bounce daemon, but nothing supported or built-in.

    pf can't "reflect" a connection back out the same interface it enters.

  • I worked around something like that:

    I did it by having an OpenVPN connection between the two locations.
    I then forwarded the traffic to an IP on the other side of the tunnel.
    For traffic leaving back the original way i enable AoN and NATed traffic into the tunnel.
    Like this all requests seem to the server as if they come from the pfSense on the other side of the tunnel.

Log in to reply