Portforward 1 private ip to 2 different WAN

ed123

Hi,

I have 2 different WAN and i want to portforward 123 from local IP 192.168.1.2 to 2 different WAN.

Local IP: 192.168.1.2:123

port forward to 2 different WAN: X.X.X.X: 123 and Y.Y.Y.Y:123

Is this possible? will i face any issue if i use this kind of setup?

Newbie

doktornotor

Sure thing, Dr. Quantum can do that.

Derelict

Are you talking about connections into each WAN going to the same internal host and port?

Just make two port forwards.

ed123

Yes, From 2 different WAN/ISP going to the same internal host and port. will i encounter some issues in doing this setup?

Was ther any special settings for this one in port forwarding configurations or such?

Derelict

Two port forwards, with firewall rules (automatic) on each WAN. The internal host doesn't care what outside IP the request came from. As far as I know pfSense and reply-to will keep everything straight on the way back. Try it and see.

johnpoz

So you want your ntp server (port 123 or was that just example?) open on 2 different wan IPs.. While it should work, not really understanding the reason why want/need to do something like that. Why is 1 not enough for users on public internet to get too?

Derelict

If you have multi-WAN and it fails over and dyndns changes to your tier 2 you need a port forward there too.

doktornotor

@ed123:

will i face any issue if i use this kind of setup?

Unless that port 123 was just an example: yeah, the main issue you will face soon will be a nifty DDoS amplification attack.

ed123

Thanks for inputs guys. another thing how can i secure the port forwarding in pf like on specific IP's or domain allowed to connect to it?

Derelict

Source addresses on the WAN rules.

ed123

guys,

Now i tried the portforwading but it did not work. Please help

setup
No RDR (NOT) > uncheck
Interface > Wan
Protocol > tcp
Source > left blank
Destination > Wan adress
Destination port range > 80 to 82
Redirect target IP > 192.x.x.2
Redirect target port > http
Description > test
No XMLRPC Sync > ucheck
NAT reflection > USe system default
Filter rule association > Rule Nat test

Firewall Rules:
TCP * * 192.x.x.2 80-82 * none

pf Version: 2.2.4-RELEASE (amd64) ..

I access it by publicip:81 or just publicip. I even change Destination from Wan address to Lan address but to no avail.

Derelict

Access it from where?

Good list of things to check here:

https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting