[Tutorial] How I do port forwarding - simple and straightforward

[zzy]

Hi, I finally get my LAN -> WAN Port forwarding working by updating this setting (check attachment)

Version: OPNsense 23.1

Question: I read this thread hinting that it has 'Rule NAT' option (only had 'Rule' option) and some other threads that suggested 'add associated filter rule' (i have never seen this option even in this case). The issue I had earlier however was that, there were 2 Rule options in the drop down, and then when I change 80 nat's option to Pass, one of the 'Rule' option disappeared, and then when I change the 443 nat's option to pass, the other 'Rule' option disappeared.

Then I go back to 80's nat config, the only option left were 'None' and 'Pass'. So I chose pass.

Is this normal? or is it a bug?

[pfabi]

Actually I have the same question. Looks that when rule is created, there is a "Rule" option. But when you try to change it - only None and Pass. Is that by design?

[mkozik1]

I am trying to get this to work for my video recorder as well and I have tried all kinds of different configurations with no luck.  I am coming from Ubiquiti Gateway and it was working perfectly on my Ubiquiti system.  Wondering also if there might be an issue with my Ubiquiti Controller interfering with the traffic?  I have disabled all of the original rules but have not changed anything.

Thanks in advance,

Mark

[9axqe]

Hi.

I exactly did what you described, because I think this way is obvious. And it works, so thanks for clarification.

But: The packets are forwarded with a SNAT, that is, the source ip will be changed to the OpnSense-IP. That is problematic if you try to analyse the packet source or simply print the source ip adress. How can this behavior be disabled? I did not find any solution or help by searching the internet.

Thanks in advance, Philipp

-- edit: disabling "NAT reflection" did not help

Hi Philipp, did you solve this problem?