Port Forwarding doesn't work.

[eshield]

Hello,

I've been testing 2.2 x64 builds for a few weeks till now and noticed that port forwarding still doesn't working (Nobody uses it?  :o).

FW log has entry about successfull connection, but Diagnostics: Show States has:
WAN tcp 10.0.0.2:3389 (172.16.20.1:3389) <- 172.16.2.1:61287   CLOSED:SYN_SENT

In fact, there is no packets are being forwarded to the host. Outbound NAT is working as expected.

Do I miss something or it's a known problem?

[Raul Ramos]

Hi

Maybe have to do with this? Have you change MTU in the WAN interface? https://redmine.pfsense.org/issues/3666#change-14107.

I have no problems, but i have not change MTU on any interface.

[eshield]

@mais_um:

Hi

Maybe have to do with this? Have you change MTU in the WAN interface? https://redmine.pfsense.org/issues/3666#change-14107.

I have no problems, but i have not change MTU on any interface.

Thanks for an answer, but it's not the case. I already played with MTUs on both ifaces. Affects nothing.

[jimp]

Works fine here on the latest snap.

WAN tcp 192.168.1.100:8888 (192.168.2.86:8888) <- 192.168.2.32:33375 ESTABLISHED:ESTABLISHED
LAN tcp 192.168.2.32:33375 -> 192.168.1.100:8888 ESTABLISHED:ESTABLISHED

[eshield]

Ok, I will double check my conf one more time.

[steve72]

Same problems here.

Upgraded from 2.1.4 to 2.2.

Running portforwards on both the WAN interface and OPT1 which is a OpenVPN client.

If I stop the OpenVPN service the portforward on the WAN interface starts working again.
If i start the OpenVPN service the portforwards stop working on the WAN interface again.

[jimp]

That sounds like it could be a config issue, if your OpenVPN client is acting as your default gateway then the behavior you're seeing could be expected if the WAN rules do not get reply-to set (reply-to disabled, no GW selected on Interfaces > WAN, etc)

[steve72]

I'm pretty sure the WAN was set to the default gateway. But since I reverted back to 2.1.4 I can't check it out.

[series_of_tubes]

I have the exact same problem.  If the OpenVPN client tunnels are up, port forwarding does not work.  Once they are off, forwarding works as expected.  WAN is set as the default GW. System is 2.2 Beta AMD64 full install.

[illizit]

I am having the same issue. We use Port forwarding on a DSL WAN connection (MTU of 1492) and we cannot pass traffic.