Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HOW TO OPEN PORT FIREWALL FOR Dynamic DNS

    Scheduled Pinned Locked Moved
    DHCP and DNS
    3
    14
    8.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mohdhizami
      last edited by

      i so sorry my english not so good… i hope u can understand... :-[

      1.can u teach me how to setting Dynamic DNS and i has register with dynDNS

      2.i want use my dynDNS from internet to monitor my pfsense

      3.or want must i do first... ??? ???

      plzz help me....

      1 Reply Last reply Reply Quote 0
      • H
        hoba
        last edited by

        To make the pfSense update a dyndns account you have to configure setting at services>dyndns in the webgui. This will only work if the pfSense sits at a real public IP with it' WAN and not behind another natted router.

        To access your pfSense from the internet you have to open the needed ports at firewall>rules, WAN. Create a rule like:
        pass, protocol, tcp, source any, destination WAN-ADDRESS, port HTTP, gateway default.

        This should work if the webgui still sit's at port 80. However it's recommended to set it to HTTPS and run it at a more random port when open to the public. You can change that at system>general.

        1 Reply Last reply Reply Quote 0
        • M
          mohdhizami
          last edited by

          what u mean "This will only work if the pfSense sits at a real public IP with it' WAN and not behind another natted router."

          my pfsense get ip from modem.

          –-----my lan (192.168.2.x)
          my modem ip 192.168.2.2---
                                                -------my pfsense wan server (192.168.2.3)--- on pfsense lan ip (192.168.1.1)

          sorry i don not how to explain you but this image on my network

          plzz help me.. :P

          1 Reply Last reply Reply Quote 0
          • B
            Bredys
            last edited by

            Its double NAT. You dont have public ip on pfsense wan interface. You cannot reach pfsense wan ip from net.
            What modem you have? ADSL? If your provider giving you public ip you must disable nat on your adsl modem and switch modem to transparent /bridge/ mode, and than configure pfsense wan to PPPoE…

            1 Reply Last reply Reply Quote 0
            • M
              mohdhizami
              last edited by

              i use modem linksys AM300.. ADSL..

              1 Reply Last reply Reply Quote 0
              • B
                Bredys
                last edited by

                Ups… i dont see your diagram before...
                Still i dont know if you have public IP from your provider... on ADSL modem wan side.
                If yes, it will be better put your PFsense right behind your ADSL modem (set in transparent mode) and equip PFsense with 3 ehternet ports. (1 for wan, 1 for lan and 1 for optional wifi)

                1 Reply Last reply Reply Quote 0
                • M
                  mohdhizami
                  last edited by

                  i use Dynamic ip…
                  wan ip for pfsense 192.16.2.3
                  lan ip for pfsense 192.168.1.1

                  ??? ???

                  1 Reply Last reply Reply Quote 0
                  • B
                    Bredys
                    last edited by

                    Im asking for your internet IP not pfsense IP…

                    Oki... i think your network will be easier if you follow my diagram:
                    Red zone is  secure zone for wifi (you can set rules on pfsense)
                    Green zone is your lan

                    If you remain on your layout, you need to create a nat rule on our ADSL modem that nat traffic from some external port to internal IP of your PFSense (ex. wan IP, port 9999 to 192.168.2.3, port 80 or 443) and then on your wan interface on PFSense allow port 80 or 443.

                    lan.png
                    lan.png_thumb

                    1 Reply Last reply Reply Quote 0
                    • M
                      mohdhizami
                      last edited by

                      Ooo… ok... tq my friend... :D  :D

                      if i want control my speed at wifi 384kbps and lan 1mbps still can.? or not..???

                      if can, can u teach me..  ;D ;D

                      1 Reply Last reply Reply Quote 0
                      • M
                        mohdhizami
                        last edited by

                        i have follow your diagram:

                        but i can enter my pfsense from internet..???

                        plzz help mee… :'( :'(

                        1 Reply Last reply Reply Quote 0
                        • B
                          Bredys
                          last edited by

                          If your ADSL modem is transparent you must set new rule in Wan that allow traffic from internet to port 80 or 443 (or your selected port for webgui)

                          1 Reply Last reply Reply Quote 0
                          • M
                            mohdhizami
                            last edited by

                            TQ is work…. you are the best.... :D :D :D

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post