Port Forwarding Problem

Started by valerio, November 19, 2019, 06:07:39 PM

Previous topic - Next topic
Hello,
i've tried to set the port forwarding on my opnsense. But it doens't work.
Originally i tested the PF from outside (WAN), to my LAN, but now i'm trying to simply redirect the connection into the LAN.

How you can see in the attachmentes, i have:
- 1 OPNSense (192.168.1.92)
- My PC (192.168.1.110)
- an FTP server (192.168.1.112)

i think to configured all correctly...

Can somebody help me?

UPDATE
i've even tried to use a different "destination address" like a LAN Address.
The installation is fresh. no rules added.

If your ftp server is on the lan why do you need to port forward it to the lan?

Obviously i need to reach the "FTP Server" from the internet, but i wasn't sure about how my "home router" manage the network, so i tried to configure the PF on the LAN for checking if is correctly set.
I can tell connectin straight from my PC to FTP server the connection is enstablished (so the service works), the problem is the PF configuration.

November 20, 2019, 12:35:14 AM #3 Last Edit: November 20, 2019, 12:47:35 AM by mow4cash
In settings NAT> port forward. You should have a rule

Interface=wan
Address=wan address
Ip=host
Ports=your ftp ports

It looks like you have LAN instead WAN

EDIT:just realized what you were trying to do.Try a port scan website to see if it is open. Does your isp block ports? DO you have something else before the router that could be blocking it. A port forward is pretty straight forward.

ISP shouldn't block the connection. I can tell because during my test, few days ago I've been able to connect from WAN into my LAN through port forwarding. I don't have anything else except OPNSense and the Router.
My Router is configured with a static public IP address (no NAT).
Oh... i forgot, OPNSense is on ESXI but i don't think it could cause the problem, because i've bridged the 2 NIC (for LAN/WAN)

My isp blocks 25 and 80 by default but that seem to be your case. If the port forward worked and you were able to connect a few days ago try to think back to what changed. Start from fresh and follow a guide for port forwarding.