Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    NAT (Port Forwarding) and web failover

    Scheduled Pinned Locked Moved NAT
    27 Posts 4 Posters 9.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S Offline
      skipper
      last edited by

      thnx for your help man!
      this is my network a bit more detailed,
      i have tried to put different interfaces and IPs on the outbound configuration but the traffic goes still to my wan :/
      now i put vpnsitetosite as interface and source any but it doesn't work.
      what should the destination be? is there something else that i need to define? create a new gateway or something like that?

      net.jpg
      net.jpg_thumb

      1 Reply Last reply Reply Quote 0
      • marcellocM Offline
        marcelloc
        last edited by

        Try to go to console and do some package capture to find what interface pfsense is using to send traffic to remote host.

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • S Offline
          skipper
          last edited by

          the request is going from vpnsitetosite–>webslavelan-->webslave
          and the reply is going from webslave-->webslavelan-->wan
          i need to send it back to vpnsitetosite interface

          1 Reply Last reply Reply Quote 0
          • marcellocM Offline
            marcelloc
            last edited by

            Can you select vpn interface on outgoing nat rule?

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • S Offline
              skipper
              last edited by

              i can select OpenVPN but not the specific vpn interface.
              do i need to create a virtual IP, a rule to 1:1, or something additional?
              i have tried many combinations for the outbound rule but the http replies are keep going to the wan interface :/

              1 Reply Last reply Reply Quote 0
              • marcellocM Offline
                marcelloc
                last edited by

                What you get when you select openvpn as interface on outbound nat for this server?

                If you can't do it with load balance, consider using a reverse proxy like (varnish,squid-reverse,apache+mod_security)

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • S Offline
                  skipper
                  last edited by

                  i get the same, nothing changes if i select openvpn as interface.
                  i will try to find another solution as it seems that what i am trying to do it's not possible with load balance.
                  thnx for your help!

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.