Opening the firewall port [new]

balubeto

Hi

I am in a LAN and I have a computer where I have a utorrent client that uses the 31950 port.

Now to open this port, I have done:

but the client still indicates that the port is closed.

Where I'm wrong?

Thanks

Bye

johnpoz

Well from looking at the first picture your WAN is a private - so its behind a NAT.. Did you forward the port you want to use at the Nat device in front of pfsense? Did you put pfsense in the dmz of that first nat device?

Why do you even have a NAT in front of pfsense? Pfsense is designed to be the role of your NAT Router/Firewall at your gateway.

balubeto

In practice, my LAN formed by an ADSL modem (10.0.0.1) with PPPoA, a NAT router/firewall (192.168.1.1) with pfSense and 6 computers.

So, how do I open in both directions the 31950 port on the Pluto computer (192.168.1.3)?

Thanks

Bye

balubeto

Clicking the x icon of this image, this window is displayed:

I can not find the "default deny rule" rule. How come? How do I change it?

Thanks

Bye

johnpoz

if the traffic reaching your pfsense wan already - then just create a port forward to whatever 192.168 address you want to send the traffic to.

You don't change the default deny rule - you put allows before it. Once you create a port forward it will automatically create the wan rule to allow the traffic

as to outbound by default all ports are open.

balubeto

@johnpoz:

if the traffic reaching your pfsense wan already - then just create a port forward to whatever 192.168 address you want to send the traffic to.

You don't change the default deny rule - you put allows before it. Once you create a port forward it will automatically create the wan rule to allow the traffic

as to outbound by default all ports are open.

How do I create this rule?

Thanks

Bye

johnpoz

under port forward!

Firewall, NAT

balubeto

@johnpoz:

under port forward!

Firewall, NAT

You try to look at my first post of this thread and you could tell me where I'm wrong.

By chance, I have to add some other rule? If so, which one?

Thanks

Bye

johnpoz

you don't show your firewall rules in those posts. And for another they are SO SMALL I can not read them.. Just attach them directly vs imgur or use something better than 500x500 freaking thumbnails.

What you show it like your going to create the rules - but not the actual rules being created. And again they are so small I can not make out the details. It was hard enough making out that you had a private on your wan.

balubeto

Now, I hope that my images are big:

Where I'm wrong?

Thanks

Bye

johnpoz

show the rules in the firewall tab as well. Do you have source setup? You don't have the forward and the wan rule linked? Why not? When you create a port forward the system can auto create the wan rule for you. Seems you did not do that.

For all I know you have source ports setup - can not see them in your image.

balubeto

I created only these two rules. In fact:

The other tabs contain only the default rules.

So, what does not work?

The Source parameter set to "any" is right?

On the NAT, what is the difference between Destination and Redirect target IP?

Thanks

Bye

balubeto

Could you help me again?

Thanks

Bye

johnpoz

Your behind a NAT - so your destination is to a private IP that 10.x.x.x on your WAN interface - did you disable block private IPs on the wan interface? See attached pic

I don't see it in your wan rules - so I would have to assume you did. Did you have any other rules on say the floating tab?

Also I would try it without the aliases. Just put in the IP and ports vs using aliases. Does that fix the problem and allow the traffic?

edit: After checking your aliases again - that does not look like a 192 to me. Do you have a typo in your alias?? hard to say with such a small screenshot that I had to zoom in on trying to make it out.

blockprivate.jpg_thumb

doesnotlooklike2.jpg_thumb

balubeto

Thank you for found the incorrect address in the Pluto but, unfortunately, the 31950 port is always closed.

So now, my configuration is this:

Where I'm wrong?

What is the purpose of the rules of the floating table?

Thanks

Bye

johnpoz

Gawd it is such a pain in the trying to view your images – have to click into them that opens a new window then zoom in because are thumbnails of what your posting..

If the IP address your trying to forward too is wrong - its not going to work..

I don't see any rules in your floating tab. Did you change your rules to use just IP and port vs aliases?? Why is there anything listed in you NAT rules if your doing automatic NAT. You must of switch to manual at some point?

Delete your current rule and forward - create a NEW forward and let it auto create your wan rule. See below, see how used the actual IP and the actual port number vs alias.

See how when I look at the firewall wan rule shows it associated to port forward. Also delete all the stuff in your NAT section if your going to leave it on auto. And could you please just attach your images? It makes it SO MUCH Easier to view vs some outside place.

rule.png_thumb

firewallrule.png_thumb

yourrule.png_thumb

balubeto

I tried to follow your instructions and delete all the rules that were in the Outbound table but the 31950 port remains closed. How come?

I have to create some rule in the table Floating? If so, which one?

Thanks

Bye

johnpoz

ARGH! Dude did you create a NEW NAT and let it create the rule using IP and Port vs your alias??

That is just clean up work - since from your post you had Auto Checked - so there shouldn't be any rules listed there unless your doing Manual NAT.

NO you don't have to create anything in the floating TAB!

balubeto

@johnpoz:

ARGH! Dude did you create a NEW NAT and let it create the rule using IP and Port vs your alias??

That is just clean up work - since from your post you had Auto Checked - so there shouldn't be any rules listed there unless your doing Manual NAT.

NO you don't have to create anything in the floating TAB!

I understand that, setting to "Automatic outbound NAT rule generation", I should not create any rule in the table Port Forward but I should only have these settings:

Right?

Unfortunately, the 31950 port is still closed.

Now, where is the error?

Thanks

Bye

johnpoz

DONT USE THE FREAKING ALIAS!! How many times do I have to say it???

Put in the ACTUAL PORT and IP

And you don't even show your NAT rule – for all I know you don't have it! Do you still show firewall blocking the port?? Then your nat and rule are NOT being applied.

And if you post one more picture to imageshack -- I am done trying to help you!! It take me 2 freaking clicks and another window trying to make out something that is not even worth looking at.