Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Port forwarding on pfsense with two LAN subnets

    Firewalling
    4
    5
    4.3k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      veoroj
      last edited by

      Hi!

      I have a pfsense box, with two nics (1 for LAN and 1 for servers). The idea here is servers seperated from LAN like DMZ thing. What I want to do is to port forward requests from outside network (pfsense WAN) to our servers and create route where my LAN users could access my servers. Where:

      pfsense wan - 63.56.122.34
      pfsense lan1 - 172.168.0.1
      pfsense lan2 - 192.168.101.1

      What I did is:

      63.56.122.34:25 –> forward --> 192.168.101.1:25 (this doesn't worked)

      Any idea? Also what's the step on creating a route from 172.168.0 subnet to connect to 192.168.101. subnet. Please help.

      1 Reply Last reply Reply Quote 0
      • P
        Perry
        last edited by

        http://doc.m0n0.ch/handbook/examples.html#id2603650

        /Perry
        doc.pfsense.org

        1 Reply Last reply Reply Quote 0
        • V
          veoroj
          last edited by

          thanks! Another question, I did what is described on the documentation regarding on forwarding with ports 25 and 80 on the DMZ zone. My DNS server resides from the LAN and Im trying to do the forwarding from WAN to LAN but it's not working. Any idea?

          1 Reply Last reply Reply Quote 0
          • S
            sai
            last edited by

            You need to add a NAT rule and then make sure that a corresponding Firewall rule (on the WAN  interface) has been setup. When making the NAT rule you did tick the box at the end to make the Firewall rule, didn't you?

            sai

            1 Reply Last reply Reply Quote 0
            • H
              hoba
              last edited by

              Please note thet DNS can be udp and tcp. Make sure your forward covers udp as well.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.