Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problems with dual wan and port forwarding

    Routing and Multi WAN
    3
    8
    3.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      fricardo
      last edited by

      Hello all,

      I have this scenario:

      WAN interface (DHCP)
      –-----

      \       
        ---------| pfsense box  |
        ---------|                      |------------> DMZ
      /    
      /

      OPT1 interface - WAN2 (Static)

      I have a mail server with internal address in DMZ and I did a port forwarding to redirect the traffic going in the TCP/UDP port 25 at OPT1 interface. In this NIC I've set the external address of my mailserver and I redirect my SMTP traffic. Then, my mail server send messages normally but the messages don't arrive. I did some tests via dnsreport.com but they fail (don't get connection with the server). When I do the same configuration with the wan address the redirecting is successfull.

      Any ideas to resolve this case?

      Francisco Ricardo

      1 Reply Last reply Reply Quote 0
      • dotdashD
        dotdash
        last edited by

        How are you testing via dnsreport unless you have an MX pointing to that IP? I would first try to telnet to port 25 from an outside location to the IP to verify. The setup seems valid (although you only need TCP for SMTP) Verify the alias IP is attached to the correct interface and the firewall rule is open on the OPT1 interface…

        1 Reply Last reply Reply Quote 0
        • F
          fricardo
          last edited by

          thanks for you reply dotdash,

          I've tested via dnsreport because I have a MX to the OPT1 address. Before, the mailserver was using the address, but now the server has an internal address with the external address in pfsense box  doing port forward. I'm using port forward with the option of firewall rules creation marked.

          I've tested with an telnet in the smtp port at OPT1 and got wrong. With the port forward in WAN interface …. success!

          Very strange

          I need more help ... please!

          Francisco Ricardo

          1 Reply Last reply Reply Quote 0
          • H
            hoba
            last edited by

            Show us your rules and forwards. I have the same setup like you at the office with 2 mx entries, one pointing to the wan, the other pointing to the optwan and it works fine.

            1 Reply Last reply Reply Quote 0
            • F
              fricardo
              last edited by

              Hello hoba … thanks. My forward is here ....

              WAN2  TCP/UDP  25 (SMTP)  100.100.100.46                25 (SMTP) E-mail mapping
                                                                    (ext.: 200.241.xx.xxxx )

              and the rules was created automatically by the pfsense.

              At LAN interface:

              TCP/UDP  100.100.100.46  *  *  25 (SMTP)  200.241.xx.xxx  NAT mail mapping

              and at OPT2/WAN2 interface ....

              TCP/UDP  *  *  *  25 (SMTP)  *  NAT mail mapping

              I´m waiting for more help.

              Thanks,

              Francisco Ricardo
              Natal/RN - Brazil

              1 Reply Last reply Reply Quote 0
              • H
                hoba
                last edited by

                Can you change your rules to only use tcp (portforwards as well as firewallrules)? Ther just was another thread where somone seemed to have a problem with tcp/udp rules. Maybe we have a bug hiding somewhere. Mailtraffic at port 25 (SMTP) is TCP only.

                1 Reply Last reply Reply Quote 0
                • F
                  fricardo
                  last edited by

                  Thanks hoba …

                  I´ll testing tomorrow and I´ll posting the results.

                  Francisco Ricardo

                  Natal-RN / Brazil

                  1 Reply Last reply Reply Quote 0
                  • F
                    fricardo
                    last edited by

                    Thanks for help hoba!!

                    The problem was resolved … I do SMTP port forward with TCP only and ... get right  :). My MX registry is pointing to my OPT1 (WAN2) interface and now mail server is working correctly.

                    Francisco Ricardo
                    Natal/RN - Brazil

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.