Can't port forward



  • Nono, my wired nic is 192.168.1.1


  • LAYER 8 Global Moderator

    My bad - typo ;)  Yeah I meant 192.168.1.1 for the wired



  • ok, and now what rules i should make? Can you give me what i should put in rules please? thank you a lot man  ;)


  • LAYER 8 Global Moderator

    Well if you want full access then just any any, if not limit to what you want..  I would assume if wanted to bridge that you just want full access.  I would think the default allow rules should give you full access.



  • Im a little confused, i want full access, i must bridge the interfaces or leave them unbridged?


  • LAYER 8 Global Moderator

    Unbridged - what are you confused about?

    You have 2 segments - forget that the 2nd network is wireless..  Why do you think you need to bridge?

    You have 2 networks, what are lrules on these 2 interfaces?  Guess I could fire up a picture if need be..



  • Now in windows in can see FreeBSD router, but not wireless devices.

    Here's my rules in Lan: http://imageshack.us/photo/my-images/195/lanxt.png/
    And Wifi: http://imageshack.us/photo/my-images/819/wifitl.png/

    Tell me what is wrong :)


  • LAYER 8 Global Moderator

    What do you mean SEE – like in UPnP see, thats what pfsense shows up as if you enable UPnP (freebsd router)

    You have this

    pfsense
    lan 192.168.1.1/24
    wifi 192.168.2.1/24

    clients
    lan 192.168.1.14 lets say with /24 mask, gateway is pfsense 192.168.1.1
    wifi 192.168.2.52 lets say with /24 mask, gateway is pfsense 192.168.2.1

    Can you not ping from client 192.168.2.52 to 192.168.1.14??

    When you say SEE do you mean do you see UPnP/DLNA server on the other network, or do you mean like showing up in some windows browse list?  Explain your use of the term "SEE" -- in such setup has I have explained clients in both networks can "see" each other just fine via tcp/udp protocols that are routable across segments.  If your wanting something that has to be in the same broadcast domain to work, then no that will not work with 2 different network segments, ie 2 different broadcast domains.

    If you want all your devices to be in the same broadcast domain, ie all in 192.168.1.0/24 then your going to have to create a bridge and use the same network.

    You can not create a bridge and use 192.168.1.0/24 on one side and 192.168.2.0/24 on other clients and expect them to talk to each other.



  • I mean showing it from windows browse, and have the ability to see public folder of any wifi connected pc and share files with them.
    Just there: http://imageshack.us/photo/my-images/94/networkhf.png/ (sorry it is italian)


  • LAYER 8 Global Moderator

    You sure and the hell do not need browse list to access shares.

    From your box on the wired 192.168.1.0/24 network access \192.168.2.x address of the box doing the sharing, or the other way as well from your wifi access \192.168.1.x the IP address of the box in your lan segment

    That stupid windows browse list does not work across network segments without the use of a wins server.  But its completely utterly a waste of time effort traffic on your network..  What you don't know the name of your computer you want to access via dns name, or its IP?

    If you want to be able to broadcast for netbios names or have all your boxes show up in the same windows browse list then your going to have to put them all in the same broadcast domain, ie same segment 192.168.1.0/24



  • Ok, how can i put wifi interface and lan in the same segment? if i bridge wifi and lan in cannot put wifi interface on 192.168.1.1 because is already occupied by lan one.

    I know all pcs names and pc but the windows browse list its ,for me, a simply way sharing files to pcs.


  • LAYER 8 Global Moderator

    So create a shortcut on your desktop for \nameofserver.domain.tld or \ipaddress - can't get any simpler than that.  Or just map a drive letter so shares on your computer look like the letter g:\ on your computer ;)

    Bridge your interfaces and then give the bridge your IP of 192.168.1.1, the individual interfaces don't to have IPs in that sort of setup.

    Or give them different IPs in the same segment, say 192.168.1.1 and 192.168.1.2 and create a bridge interface of 192.168.1.3

    I personally would not use bridging and just map your shares to a drive letter of folder - much easier access that way ;)  And you could even turn off the browse feature all together because its just sending unwanted traffic/noise on your network ;)



  • Im sorry man but don't know how to create \ipaddress shortcut or map a drive letter. Can you show me how to do that?  :'(


  • LAYER 8 Global Moderator

    you don't know how to map a drive letter in windows?  Really?

    As to put a shortcut - just drag the icon to your desktop in your widow showing you your share.  See attached example

    Do you know how to run a command and put in \IPaddress?  - see example after you hit the windowkey + R

    As to map, tools - map and then fillout the form.

    Let me know if you need more screenshots of more detailed help.








  • I cannot find temp folder :( i only found users folder.


  • LAYER 8 Global Moderator

    Really dude – Really??  That is MY MACHINE!!!  No shit my shares or IPs are not going to match up to yours ;)  ROFL!!

    It was an EXAMPLE, do I have to define the word example for you as well? ;)



  • No. I created Z: drive that contain my public folder, now how can i share it with wireless pcs?


  • LAYER 8 Global Moderator

    dude what do you mean you created a Z drive?  You MAP a share from one computer to a drive letter on another computer.

    What is the IP of your box you want to share your public folder from?

    from your wireless network \thatipaddress

    Do you see the shares - there you go done!  Now you can either map that to a drive letter on your wireless machine, or create a shortcut to it on your desktop.  Or any time you need to access a share just run \thatipaddress

    So you have been using computers for what like 3 days?



  • Man I have a pc connected with lan and is the only one wired connected to pfsense. All other cmpueters are connected via wifi. I want to share folders so if needed i can share files with other compueters. I mapped my public folder and i assigned the drive letter Z. Now, all other computers connected via wifi cannot see the folder. What i should do? The windows browse list was the simpliest way of sharing files for me.


  • LAYER 8 Global Moderator

    You mapped your public folder WHERE???

    From your wifi clients can you PING the ip address of your wired box??

    if so then \thatipaddress from your wifi boxes – do you see the shares of your wired box?  Do you get asked to auth?  What happens?  If you see the shares then map that to whatever drive letter you want on your wifi boxes, or drag it to your desktop on the wifi boxes so that they have a shortcut.

    Who uses these wifi boxes - are they new to computers as well?  How do you use a computer in this day and age an not understand how to access a share??  freaking blows my mind!



  • I mapped my public folder on my wired connected pc and wifi boxes cannot see that folder! I use a computer since ages ago, but before i was connected on previous router via wifi and all other computers were and i was able to share files through the windows browse list that you hate so much. Mapping a folder is new to me because i did never use that method before. If it blows your mind i can't doing anything.
    I also cannot ping wifi boxes from my pc:
    PING 192.168.2.2 (192.168.2.2) from 192.168.1.1: 56 data bytes

    –- 192.168.2.2 ping statistics ---
    3 packets transmitted, 0 packets received, 100.0% packet loss


  • LAYER 8 Global Moderator

    "I mapped my public folder on my wired connected pc"

    Why and the F would you do that???  Your just accessing yourself??

    So your box is 192.168.1.1 ???  What is the IP address of the pfsense lan IP?

    what OS are you using that shows ping command like that, from IP?

    And do you have a firewall running on the wifi box?  Windows by default will block icmp (ping)  So have you allowed the firewall or disable it so that you could test connectivity.

    You want your browse list back - then go back to that.. I already told you how to do it!!  Put your computers on the same network!  Bridge the physical interfaces on your pfsense = there you go everyone on the same broadcast domain and you can use your browse list.

    I really think you would be better off just buying a $50 wireless router and using that as your gateway.. Then there is no thought or setup..  You would have a wired port to plug your computer into, and a bridged wireless network where everyone gets IP from the routers dhcp server.



  • its the same thing! if i map a folder on a wifi computer, i cant see it from my pc!

    i used pfsense to test ping, just diagnostics - ping.

    My pc is  192.168.1.100, lan is 192.168.1.1, wifi is 192.168.2.1

    on the wifi box i have simply windows 7 or 8.


  • LAYER 8 Global Moderator

    ARrrghhh –

    do could you please post up your ipconfig /all from your wired box and wireless box.

    Then on each box do a net share command from cmd line this will show me the shares you have enabled on each computer.

    If you can NOT ping a wireless client from pfsense - can these wireless clients access the internet?  If so then you must have a firewall blocking the ping on the wireless client, or your not connected to the pfsense wireless

    As to mapping --  you don't MAP your own boxes shares.. you map the share on the other box..

    so pc 192.168.1.100, wireless client is 192.168.2.X

    So from wireless box run \192.168.1.100

    do you see shares??  If so map one of those shares to a drive litter on your wireless box via the map dialog on the wireless box where it says \server\share use \192.168.1.100\sharename, guessing its called public?  so \192.168.1.100\public would be the path your mapping to say G: on your wireless box.

    If you want, I would be happy to teamviewer into your boxes and set this up for you - this way you can watch and we can work out if your having firewall issues or not, etc.  teamviewer is FREE and you can get it from here http://www.teamviewer.com/en/index.aspx

    You can then send me a personal message here on the board and I can remote to your machine your running TV on and we can chat in realtime and you can everything I am doing, etc. etc.



  • I really appreciate your replies and time spent. I can ping wireless box from pfsense, before was only my error, when i pinged the wireless computer of my brother he was rebooting.
    I bridged the two interfaces as you said before and now all works properly.
    Now i can map a folder and other wireless devices can see and access to it. I think the problem was the different segmentation.
    I really really thank you ;D and im sorry if im so noob.


  • LAYER 8 Global Moderator

    The only problem with the segmentation would be the browse list would not work.. you would only ever see boxes on your own network with a browse list.

    But that browse list has NOTHING to do with sharing of files - nothing!

    Glad you got it working.


Log in to reply