Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Port Forwarding not working

    Scheduled Pinned Locked Moved NAT
    15 Posts 5 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      rkv00784
      last edited by

      We are trying to access the web services running on internal server from Internet. We have add NAT rules for forwarding the ports 80 and 443. Still we are not able to access the sites. telnet to these ports are timeout.

      1 Reply Last reply Reply Quote 0
      • GruensFroeschliG
        GruensFroeschli
        last edited by

        Show us your rules.

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • R
          rkv00784
          last edited by

          My port forwarding rules as follows.

          portforward.jpg
          portforward.jpg_thumb

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by

            Does 10.0.0.254 have pfSense as its default gateway?  Do its local firewall rules allow such connections from foreign networks?

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • R
              rkv00784
              last edited by

              10.0.0.254 has different ISP connecting to it, Hence it has a different Gateway. Is there any other method other than changing the Gateway.

              Our main purpose is to access the webservices in 10.0.0.254 from both these ISP's. So that if any one of these ISP's goes down the webservice will be still accessible from the Internet.

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                That's not how IP routing works.  It is up to the device that has to change where it sends the traffic (in this case 10.0.0.254) to know which gateway to use and when.

                Look into multi-wan and put both ISPs on one pfSense and let it deal with it.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • R
                  rkv00784
                  last edited by

                  The System which I run pfsense is only have 2 NICs. one is for WAN and other one for LAN. Is it possible to split the WAN interface to two and terminate 2 interfaces to 1 WAN interface?, The current WAN interface is PPPoE.

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    You'll need to use VLANs and a managed switch or get more NICs.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • GruensFroeschliG
                      GruensFroeschli
                      last edited by

                      Alternatively you could configure source NAT on the pfSense, so traffic to 10.0.0.254 look as if it originates from the pfSense.
                      The downside is that you loose the original source. (e.g. for statistics).
                      Also i'm not sure if this is the right solution for you.

                      We do what we must, because we can.

                      Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                      1 Reply Last reply Reply Quote 0
                      • R
                        rkv00784
                        last edited by

                        Could you please make it clear?

                        1 Reply Last reply Reply Quote 0
                        • D
                          doktornotor Banned
                          last edited by

                          Yeah. Get another NIC if you don't understand any of the above. Clear?

                          1 Reply Last reply Reply Quote 0
                          • R
                            rkv00784
                            last edited by

                            Okay. I have no PCI slots available to add NICs. I have USB ethernet adaptor connected to Pfsense. Please tell me how to configure it.

                            1 Reply Last reply Reply Quote 0
                            • DerelictD
                              Derelict LAYER 8 Netgate
                              last edited by

                              And down the rabbit hole we go again.

                              Chattanooga, Tennessee, USA
                              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                              Do Not Chat For Help! NO_WAN_EGRESS(TM)

                              1 Reply Last reply Reply Quote 0
                              • D
                                doktornotor Banned
                                last edited by

                                @rkv00784:

                                Okay. I have no PCI slots available to add NICs. I have USB ethernet adaptor connected to Pfsense. Please tell me how to configure it.

                                OK. Get a suitable hardware for your needs. A box limited to two NIC ports is NOT suitable when you need multiple WANs plus LAN(s). USB NIC is not suitable for any serious use.

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by

                                  Serious use, I wouldn't even use usb nics for play/testing..

                                  So you have multiple ISP, and host stuff to the public - but your running on a piece of hardware that has only 2 nics and you want to use usb nics.. Come on your talking a few hundred dollars to get hardware better suited, etc..

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.