Several ports are not open

[amd.64]

Can anybody PLEASE tell me if and where I went wrong.

I have three OPNSense routers / firewalls in use, this is the only one I am having trouble getting ports open. Shentel, the ISP says they are not blocking ports. The attached image is of the WAN rules.

Thank You

[amd.64]

I forgot to add that this system is running 26.1.10 if it matters.

[OPNenthu]

You might be missing NAT rules for port forwarding: https://docs.opnsense.org/manual/nat.html#destination-nat-port-forward

Those 192.168.x.x addresses are not reachable from the internet so you can also remove those destinations from the WAN rules.  You probably just want to keep the WAN ports open (no src/dest filters, or maybe just dest=WAN address) and let the port forward rules direct the traffic to the correct destinations internally.

Hopefully you've got strong authentication on each of these services you're exposing.  If you'll always be connecting from known networks, it might also be good to put source filters on the WAN rules.  Longer term, you might want to look into WireGuard.

[OPNenthu]

*double post while editing*

[nero355]

Hopefully you've got strong authentication on each of these services you're exposing.  If you'll always be connecting from known networks, it might also be good to put source filters on the WAN rules.

Longer term, you might want to look into WireGuard.

I would say it's a good thing these don't work right now and he should FIRST look into Wireguard/OpenVPN/whatever BEFORE exposing these things to the outside world !!

Thinks to think about :
- Microsoft RDP => Bound to be vulnerable at some point and very fast too !!
- Whatever IP Camera's you got hanging around => Often do not receive any firmware updates/security patches after a relatively short period and can become the reason your network becomes abused for all sorts of stuff !!
- Not sure what the last one is, but while you are at it just protect it too

I forgot to add that this system is running 26.1.10 if it matters.

You are 1 update behind right now!

[chemlud]

https://www.veeder.com/us/

srsly? You want to have this on your LAN? Together with office Windows PC and some DVR and expose all of them to the interwebs?

Why use a "firewall" in the first place? Get a switch and done. Don't expect it will take longer than a few minutes and all your network is compromised.