Nat port forwarding

casper001

hello everyone,

does pfsense support port forwarding from public ip address? i forward port 80 to different machine and it is opening pfsense configuration interface.

thanks

ptt

Go to "System -> Advanced -> Admin Access Tab" and change the "webConfigurator" port to other than "80" and/or disable webConfigurator redirect rule

https://doc.pfsense.org/index.php/Main_Page

https://doc.pfsense.org/index.php/How_can_I_forward_ports_with_pfSense

https://doc.pfsense.org/index.php/Why_can%27t_I_access_forwarded_ports_on_my_WAN_IP_from_my_LAN/OPTx_networks

https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting

casper001

I have done that my friend but still accessing pfsense web configurator. I want to enable port forwarding on my web server inside local network so… :( no I will try NAT Reflection

casper001

ok people I have configured NAT Reflection + 1:1 NAT, assigned different port to my web configurator every thing was working. I have 10.0.0.0/24 as an internal network and 192.168.1.0/24 was my wan connection coming from router. I configured rules for LAN blocked everything and allowed some traffic as I need. I removed router and connected my WAN to media converter assigned public IP address and than pfsense noticed me about errors in rules on LAN network. I restarted pfsense and system became completely unstable! It is not booting at all. Well at that time my VGA card just burned, an old thing ;D ;D ;D
Now it was an hardware issue or it was an pfsense bug? if anyone had similar situation or can give me some advice thank you all ;)

chpalmer

@casper001:

does pfsense support port forwarding from public ip address? i forward port 80 to different machine and it is opening pfsense configuration interface.

Um- yes!

SYSTEM/ADVANCED/ADMIN ACCESS page.

As noted in the first reply by ptt-

You need to make sure your GUI is not answering on port 80-
CP port= (something else but 80) Hopefully your using HTTPS here.

but then also-
Check the "WebGUI redirect" box

When this is unchecked, access to the webConfigurator is always permitted even on port 80, regardless of the listening port configured. Check this box to disable this automatically added redirect rule.

save

casper001

thanks for you answers. Now it is working :)