Port forward when PF sense Wan address is a private address

nickom

Hello,

I am trying to configure SSH to a machine on my internal network which is managed by a PF sense router but i'm having difficulty working out the way to configure PF sense.

My config is as follows:

1, I have an ADSL router connected to the internet, this has the public IP address.

2, My PF sense firewall is connected to the ADSL router, the router supplies a private IP address (192.168.1.65) to the firewall, effectively this is the WAN IP address as far as the firewall is concerned

3, The device i am trying to connect to has an IP address of 192.168.2.91 , this is issued by the PFsense DHCP server.

Is it possible to configure the firewall to port forward from a public ip address on the ADSL router through the PF sense firewall to the end device?

Any help is really appreciated

Best regards
Nick

johnpoz

No not without access to the adsl router or having it setup so your pfsense wan IP 192.168.1.65 is in the DMZ of that adsl router.

Yes if you can forward 22 to your pfsense wan on your adsl router, then you can forward 22 to whatever 192.168.2 address you want. But the traffic has to get to pfsense from the public internet before you can do anything.

nickom

Thanks JohnPoz,

I have forwarded port 22 from the ADSL router and its kind of works , i have done a packet capture since i posted and this has revealed that i'm getting through to the WAN Ip address on the PF Sense but it doesn't get any further, do you think the WAN and LAN address being on different subnets may be causing the problem?

I forgot to mention that i'm running Captive portal but i have added the device into Pass-through MAC

regards
Nick

johnpoz

Did you setup the forward on pfsense.. Why don't you sniff an see does your client your forwarding to get the packet and answer?

Your not trying to do nat reflection to get to this are you?

nickom

yes, i enabled it to test at first , but then used a cellular device to test it from outside the network.

regards
Nick

nickom

Hi Johnpoz,

can you advise how to set up the ip address forward on PFsense, i have create a Pass-through-MAC in the Captive portal, but im unsure what i need to do elsewhere.

Thanks for your help
Nick

johnpoz

Forward 22 or whatever port your wanting to use to the ssh port and you private address.. See attached example of my forward.

nickom

Thanks Johnpoz,

That worked , I had entered the info as described in the picture except I entered the source address rather than leaving it blank, as soon as I cleared it, it worked.

Thanks very much for your help
Nick