Show Posts
1
General Discussion / Port forwarding
« on: April 28, 2024, 05:21:33 pm »
Hi, new to opnsense and trying to replace the router in my home with opnsense. My previous router has a simple setup of the following stuff which I am trying to implement witn opnsense:
* Outbound internet access - Check
* DHCP server for LAN subnet with static IPs for certain MACs - Check
* Port forward incoming TCP on port 2222 to port 22 on server on LAN - FAILURE!!!
Why does the port forwarding not work? When setting up port fwd I go Firewal/NAT/Port forwarding and I use
- Destination: <WAN Address>
- Destination port range: other 2222...2222
- Forwarding to : Single server <IP of LAN server>
- port: 2222
I can see that besides the rule under NAT an automatic rule appears also under firewall/rules.
Still when I go to an external server and do:
it does not connect!
I have accepted ICMP request temporarily on WAN side just to prove that WAN address can be reachable and yes I can
from external host successfully.
Do I have to do anything more to get the port fwd to work? Do I have to explicitly add an open TCP 2222 rule as well? Or is it something else that is needed?
Rgds,
John
* Outbound internet access - Check
* DHCP server for LAN subnet with static IPs for certain MACs - Check
* Port forward incoming TCP on port 2222 to port 22 on server on LAN - FAILURE!!!
Why does the port forwarding not work? When setting up port fwd I go Firewal/NAT/Port forwarding and I use
- Destination: <WAN Address>
- Destination port range: other 2222...2222
- Forwarding to : Single server <IP of LAN server>
- port: 2222
I can see that besides the rule under NAT an automatic rule appears also under firewall/rules.
Still when I go to an external server and do:
Code: [Select]
> telnet <WAN address> 2222it does not connect!
I have accepted ICMP request temporarily on WAN side just to prove that WAN address can be reachable and yes I can
Code: [Select]
ping <WAN address>from external host successfully.
Do I have to do anything more to get the port fwd to work? Do I have to explicitly add an open TCP 2222 rule as well? Or is it something else that is needed?
Rgds,
John