SYN_SENT:CLOSED to ELK server on Hyper-V

[killmasta93]

Hi,
I was wondering if someone could help me or guide me what could be the issue when trying to open the NAT ports on my ELK server I followed this guide, also changed the http port on pfSense to 81

https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-4-on-centos-7

then at the part where it says "Kibana is now accessible via your FQDN or the public IP address of your Logstash Server i.e. http://logstash_server_public_ip/. If you go there in a web browser, after entering the "kibanaadmin" credentials, you should see a Kibana welcome page which will ask you to configure an index pattern. Let's get back to that later, after we install all of the other components."

I would enter http://181.137.97.XXX:5601
and nothing then I would check states on pfSense shows SYN_SENT:CLOSED which means either its not  replying or missing the gateway which then i check ifconfig and shows the gateway is 192.168.3.254

My NAT set up see pictures.

But if I would go to the Gui on Cent OS and type localhost:5601 it shows Kibana so i know its working but now its the ports that im unsure about if its working.

Thank you

[killmasta93]

Alright so I ended up installing ELK on lbuntu and make it internally I am currently making a tutorial for anyone wanting to have a ELK server for pfSense  logs

[arduino]

Id love this! I tried to follow that tutorial and it turned into a nightmare.

[killmasta93]

haha yeah i made my own guide  :) let me know how it goes

http://www.mediafire.com/view/j25mbohmmxvt7g4/Installing_ELK_on_Lubuntu_15.0.4_ON_HYPER-V.docx