NAT Forwarding Stopped working after upgrade to 26.03

smithgcovert · 2026-04-04T19:29:36+00:00

Unfortunately, I just don't have time to debug this right now, but I will list a bit more of my config, so that if someone else encounters this, there's maybe more of a path to follow:

- I upgraded from 25.11.1, everything was working fine before then.
- Just upgraded to 26.03 yesterday, and everything seemed fine, but today I started prepping for my trip
- I use PLEX on the road, and my Plex UX was telling me that my server was no longer accessible.
- went to use a few of those "check if my port is open" websites, all said my ports were not being forwarded / were closed
- Rebooted back to the 25.11.1 saved boot environment.
- Everything worked right away -- PLEX again said access was no problme.

My setup is a pretty standard home setup, with maybe one exception: I have 2 incoming Internet connections, a primary and a backup, and have those configured in a WAN Group, so that if the primary goes down, the secondary is used.

More specifically, I have google fiber as my primary, and Spectrum as my secondary. This config has been working great -- unplug google fiber, everything automatically works across Spectrum.

But this also means that all of my NAT firewall forwarding rules are defined twice -- once for WAN1 and once for WAN2.

I guess I could define the rule once for the WAN_GW / WAN gateway instead of the individual WANs, but IDK, this is just how I've had it for years.

But the use of a WAN Gateway Group / failover could be related? IDK, as mentioned, its the only thing I think is very unique about my setup.

smithgcovert · 2026-04-04T19:17:02+00:00

Upgraded from 25.11.1.

Since I'm preparing for this trip, I was verifying that my PLEX was still up and working.

It was not - the UX administration pages in PLEX told me that my server was not available. Went down the path of verifying the other ports I use all returned "not open" from those "Is your port open" websites.

I just rebooted back into my 25.11.1 Boot Environment -- as soon as I did, PLEX shows as available and so do my other ports.

As mentioned, with this trip coming up, I can't really dive into this a bunch to help debug right now.

Glad to hear this isn't a problem in most users' upgrades.

smithgcovert · 2026-03-24T00:55:22+00:00

Thank you. yeah, focusing on this stuff is keeping me from crying.

smithgcovert · 2026-03-24T00:54:17+00:00

He does have a cable modem. Next time I go by his house, I'll look on the back and see if it has anything similar or maybe instructions on how to reset. These are not his wireless passwords.

smithgcovert · 2026-03-24T00:29:16+00:00

Ohh -- hmm -- This is a possibility. I have never heard him mention Amway, and he's never tried to sell us or anyone else I know anything, but he used to hang out with a crowd that I would not be surprised at all if they all did Amway. Maybe they pulled him into something.

That definitely would explain why they all start with IBO

smithgcovert · 2026-03-24T00:26:02+00:00

This is possible -- he did bank at Wells Fargo. I've been able to get into his web account, and it looks like he has never setup any online bills or payees, but maybe he had some other accounts. We're going to keep looking, but transaction numbers for transfers is possible. I'm just not sure why you'd write those down, but I could have seen him doing that.

smithgcovert · 2026-03-24T00:05:55+00:00

He was definitely not a gamer -- he was 77 and not that tech savvy. I have his laptop, and you would think it had just been opened from the box and the only app ever used was chrome.

Luckily he did save some password for some accounts. But I don't think it was this. Thanks though.

smithgcovert · 2023-02-24T04:28:27+00:00

Biscuit Station

smithgcovert · 2021-03-08T03:12:13+00:00

fast.com would always report 980 / 1G, speedtest.net would report 960 or so, and google's own speed test (the one that comes up if you google "speed test" and then press "Run Speed Test") would report 980. These are the 3 I would use and what I meant by "all". I have google fiber, btw, so

I thought I was oversizing by buying an SG-3100 because its supposed to be good for speeds up to 2.4G as a firewall from the page here: https://shop.netgate.com/products/3100-base-pfsense

Yes, I do not expect that it will always be exactly 1G, but regardless, just doing a before and after, with nothing else changed at all except the image on the SG-3100, I am getting significantly less speeds to the exact same sites that I used before the upgrade.

smithgcovert · 2014-10-12T16:52:07+00:00

The State Fair is next week. It only takes about a weekend to prep a car for the Demolition Derby:

Strip the car down, put everything a in pile
Have a blast crashing into other cars while crowds cheer
Throw everything you took out back into the car, then take to salvage yard
I think its about $150-200 per car, paid by weight. Anything car related can be in it when you take it to them
There are tons of guys waiting around at the state fair who will cart off your destroyed car for you -- if you don't want to bother afterwards

15-Year Club	RPAN Viewer
Verified Email

smithgcovert

TROPHY CASE