How do I do port forwarding over my VPN?
-
I'm a home user, and pfSense is my firewall/router and VPN client for my entire home. (I had a DD-WRT router doing this before, but it was maxing out at 10Mb/s with the VPN.)
These firewall rules are Greek to me. I've read the documentation, but it's just not clicking. I got the VPN traffic to work at all by copy/pasting from support threads on the pfSense forum, but honestly, I don't understand what I did.
I tried adding a rule (or rules) to open a port to my torrent client, but I can't get it to work. Screenshots of all my rules are below.
My VPN provider has a simple web form to open the port on their VPN server, and I've done that.
I've tried various permutations on these, but I haven't had any success. What am I doing wrong?
-
Just a thought, since I see the OpenVPN tab in the rules section, i assume you are using OpenVPN, have to tried adding the rule under OpenVPN tab
I would try NAT rule to the OpenVPN Client IP
im closer to to a middle user then new, i am learning as i go but ill def try to help
-
Could you explain what, exactly, you're trying to achieve here?
-
Could you explain what, exactly, you're trying to achieve here?
I want to open a port so my torrent client can receive incoming connections.
-
I want to open a port so my torrent client can receive incoming connections.
Through your vpn connection?? That would have to be enabled on your vpn endpoint.
There is nothing you can do on pfsense to allow that to happen without support from the other end of your vpn connection.
BTW the last rule for policy to send traffic out the vpn will never be seen, rules are from top to bottom. And you have a rule above that which allows all traffic from your lan net - so traffic would never get to your rule where your trying to have it use a specific gateway.
-
I want to open a port so my torrent client can receive incoming connections.
Through your vpn connection?? That would have to be enabled on your vpn endpoint.
There is nothing you can do on pfsense to allow that to happen without support from the other end of your vpn connection.
Yes, I understand that. I need the VPN provider to open a port on their server. They have a nice little web form for that, and I've taken care of it. I still coundn't get port forwarding to work, however.
BTW the last rule for policy to send traffic out the vpn will never be seen, rules are from top to bottom. And you have a rule above that which allows all traffic from your lan net - so traffic would never get to your rule where your trying to have it use a specific gateway.
Okay, thanks. I can't check it now, but I will when I get home.
-
"They have a nice little web form for that, and I've taken care of it."
Ok - lets walk through what you have then. I missed that in your first post.
In your port forwards I would think the dest IP should be your vpn interface address not *
I would check that the traffic is actually coming down the tunnel - do a sniff in pfsense to see if traffic is hitting pfsense from your vpn connection. If see if pfsense is forwarding it to your client.
Your issue might be that when you answer back it goes out your normal connection and your issue is a asynchronous routing issue.
