• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Port Forwarding Issue

Scheduled Pinned Locked Moved NAT
13 Posts 6 Posters 5.5k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S
    sunny
    last edited by Oct 19, 2006, 8:16 PM

    Hi all,

    Before I begin, I should mention that I'm totally new to pfSense.  The setup is fine except one thing which is portforwarding.  Simply put, i have a web server with IP address of 10.1.1.70 and I want to forward all the external requests on port 82 to my web server.  Can someone please tell me exactly, how to accomplish this?  If you need any additional info please feel free to ask.

    Thanks in advance,
    Sunny

    1 Reply Last reply Reply Quote 0
    • R
      rsw686
      last edited by Oct 19, 2006, 11:55 PM

      On the firewall menu select NAT. Click the plus image to add a nule rule. Then fill in external port 82, nat ip 10.10.1.70, local port 80, and give it a description. Leave auto-add a firewall rule checked and click save.

      1 Reply Last reply Reply Quote 0
      • S
        sunny
        last edited by Oct 20, 2006, 1:09 AM Oct 20, 2006, 12:37 AM

        Thanks for your reply!  I tried it but doesn't seem to be working.  Is there anything else that needs to be changed?  Actually, its getting timed out.

        1 Reply Last reply Reply Quote 0
        • S
          sintar
          last edited by Oct 20, 2006, 12:10 PM Oct 20, 2006, 10:57 AM

          try this not sure if it will work

          pfsensenatrules.jpg
          pfsensenatrules.jpg_thumb
          pfsensenatrules.jpg_thumb

          1 Reply Last reply Reply Quote 0
          • H
            hoba
            last edited by Oct 20, 2006, 6:34 PM

            Don't use external adress "any". You need to bind it to the WAN-Adress. any is only for some special application (for example when redirectring traffic to any external adress on port x back to a proxy for example).

            1 Reply Last reply Reply Quote 0
            • S
              sunny
              last edited by Oct 20, 2006, 7:39 PM

              Hoba, do you mind walk me thru the process please?

              1 Reply Last reply Reply Quote 0
              • H
                hoba
                last edited by Oct 20, 2006, 7:47 PM

                Can you paste your setings for the firewallrule and the portforwarding that you created please?

                1 Reply Last reply Reply Quote 0
                • M
                  mobilemrice
                  last edited by Nov 2, 2006, 1:41 PM

                  Hi Hoba,

                  I am also encountering issues with my NAT settings.  Can you please look at the attached settings?  Thank you.

                  ![NAT settings.gif](/public/imported_attachments/1/NAT settings.gif)
                  ![NAT settings.gif_thumb](/public/imported_attachments/1/NAT settings.gif_thumb)
                  ![NAT settings.gif_thumb](/public/imported_attachments/1/NAT settings.gif_thumb)

                  1 Reply Last reply Reply Quote 0
                  • H
                    hoba
                    last edited by Nov 2, 2006, 1:52 PM

                    The NAT entry looks ok from the first sight. If you have an appropriate firewallrule in place that is allowing this traffic it should work. Also make sure you are at 1.0.1.

                    1 Reply Last reply Reply Quote 0
                    • M
                      mobilemrice
                      last edited by Nov 10, 2006, 11:12 PM

                      What type of rule would allow visitors from the WAN to the OPT1 net with the host using the NAT I set above?

                      1 Reply Last reply Reply Quote 0
                      • H
                        hoba
                        last edited by Nov 11, 2006, 2:50 AM

                        Interface WAN
                        protocol tcp/udp
                        source any
                        destination <private ip="" of="" forwarded="" client="">port <destination port="" at="" the="" client="">gateway default</destination></private>

                        1 Reply Last reply Reply Quote 0
                        • P
                          PinoVero
                          last edited by Dec 8, 2006, 3:43 PM

                          i have the same itentical problem, except for…

                          i set 2 firewall rules:

                          prot: * from: * port: * to: 192.168.0.40 port: * gate: *    (windows machine)
                          prot: * from: * port: * to: 192.168.0.200 port: * gate: *    (linux machine)

                          so i'll be sure that i can transfer any packets from and to any ports to these 2 machines

                          now, i need to open only 1 or 2 single port to forward to, so i make a nat rule like this:
                          if: wan prot: tcp port: 4889 nat: 192.168.0.40 (ext: 2.247.bla.bla) port: 4889  (correctly WORK!!)
                          if: wan prot: tcp port: 4889 nat: 192.168.0.200 (ext: 2.247.bla.bla) port: 4889  (DON'T WORK!!)

                          So, why nat don't like to linux port forward???

                          1 Reply Last reply Reply Quote 0
                          • P
                            PinoVero
                            last edited by Dec 8, 2006, 3:53 PM

                            oky, the reason is that

                            on the linux machine i have not jet configured the proper gateway!

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                              This community forum collects and processes your personal information.
                              consent.not_received