Port forwarding never reaches designated machine

Started by gigagames, December 03, 2025, 09:16:07 PM

Previous topic - Next topic
December 03, 2025, 09:16:07 PM Last Edit: December 03, 2025, 09:17:59 PM by gigagames
Hello,

I try to setup Port Forwarding on my Opsense box, but it seems like the traffic goes out my WAN and not to the Designated machine.

I have setup an PIA Wireguard connection using this script: https://github.com/FingerlessGlov3s/OPNsensePIAWireguard The connection works as expected. But now I want to Enable Port forwarding for this I created the Following under Firewall NAT: Port Forward
You cannot view this attachment.

I also tried to set `Filter rule association` to Disabled and created my Own rule, but the result was the same.

If i now try to connect to the Public PIA address I got + Port I can see the traffic in Opnsense, and I can also see that the traffic is redirected to my 10.30.0.80 machine (On my Server vlan 30 interface)
You cannot view this attachment.

But noting is received by the 10.30.0.80 machine. If i run `tcpdump -ni vlan0.30 port 62217` on Opnsense I also see no traffic.
If i run the tcpdump with my pppoe0 (wan) interface, I can see the traffic.
It seems like the traffic is redirected to the 10.30.0.80 machine but instantly routed through my WAN.
I think its because of this auto generated Rule:
You cannot view this attachment.

But I'm unsure on how to remove that rule.
Do you guys have some advise on what I need to change, so that the traffic is reached by the designated machine on my Server Interface?