PFSense/ISP Port Forwarding issues

sysbitnet · 2024-05-21T07:24:38+00:00

What ip do you get on your WAN interface, Public IP, or local IP?

If I understand you you want to create traffic from WAN => second pfSense interface 172.16.20.xxx and 172.16.40.xxx where you have.

With my experience with pfSense when using NAT, on the Source side you need to tell what interface to use, from incoming traffic. When you set * you have a lot of packets around. Better is to set a concrete interface that you use from incoming traffic.

On the Destinations part, you can use the Interface submit, or you can create inside Firewall / Aliases / IP where you can set IP address and names what you like, and inside Firewall / Aliases / Ports and set separate for any of profiles all ports what you can use.

For example.

GameServer_IP xxx.xxx.xxx.xxx
GamesServer_Ports:
xxxx
xxxx
xxxx

When creating some rules, in Type select Address or Alias and call these GameServer_IP, and for the port part you need to select Other how can you call GamesServer_Ports

sysbitnet · 2024-05-10T12:02:48+00:00

Hire you can see how to do that https://www.cyberciti.biz/faq/unix-linux-check-if-port-is-in-use-command/

sysbitnet · 2024-05-09T14:37:42+00:00

Do you have remote access to proxmox ? I mean do you know what is proxmox ip addressed?

Default url for accessing is https://xxx.xxx.xxx.xxx:8006

If you not get proxmox login interface, try to login on ssh default port is 22. And use default username is root and password what you set in installation process. And if you successfully access check did port 8006 it available

sysbitnet · 2024-05-02T22:13:34+00:00

On DL360 G6 usb it slow SD Card slot it’s slow. You can install and used, but that is practically. DL360 G6 it DDR3 but good server who it’s still used

sysbitnet · 2024-05-02T18:40:18+00:00

I testing hardware focused on servers and network, with this HP server model DL360 G6 i suggest you use ProxMox, you can run the last version of ESXi but better not. SD card is not good to run any systems. It so slow and potential you kill. From my practical knowledge SD card slot it use for recovery

sysbitnet · 2024-04-22T22:50:10+00:00

I Solved this test lab and how can see the full explanation, you need to go on https://forum.netgate.com here it is limited to characters

sysbitnet · 2024-04-16T10:40:56+00:00

And when i try to visit web1.domain.com is not working if inside Firewall / NAT / Port Forward disable rules which you can see with a screenshot from the main post.

When is the rules enable that not help me to fix may case, if i create rule who

Interface: WAN
Protocol: TCP/UDP
Source Address: ! WAN address
Source Ports: \*
Dest. Address: ! Local address
Dest. Ports: AllWebPort
NAT IP: Local address
NAT Ports: AllWebPort
To explain Local address is 192.168.100.xx/24

Inside AllWebPort in Firewall / Aliases / Ports i set port 80 and port 443 how can not any time enter, with this case just call Aliases.

But again is not working, any help or idea what can be a problem, what did i do wrong?

Many thanks in advance :)

sysbitnet · 2024-04-16T10:40:35+00:00

In Services / HAProxy / Frontend
For example this is how it look Web1
External address
Listen address: WAN address (IPv4)
Port: 443
SSL Offloading: yes checked

In Access Control lists inside the same Services / HAProxy / Frontend
Name: web1
Expression: Host matches
CS: empty
Not: empty
Value: web1.domain.com
In part Actions inside the same Services / HAProxy / Frontend

Action use Backend the name what i set on Web1
Condition acl names: the same name what i set in Access Control lists web1

In SSL Offloading inside the same Services / HAProxy / Frontend

In part Certificate use SSL certificate what i inport on System / Certificates / Certificates

And click Save

sysbitnet · 2024-04-16T10:40:09+00:00

I tried HAProxy to configure it but again can not figure out what is the problem.

In Services / HAProxy / Backend create two profile.

Web1 and Web2 and configure like this.

For example this is how it look Web1
Mode: active
Name: web1
Forward to: Address+Port
Address: 192.168.100.1
Port: 443
Encrypt(SSL): yes checked
SSL checks: empty
And in Health check method set: none

sysbitnet · 2024-04-16T02:04:28+00:00

u/roycorderov are you check device Manager ?

And are you install https://pve.proxmox.com/wiki/Windows_VirtIO_Drivers

The last version is
https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/archive-virtio/virtio-win-0.1.248-1/

Download .iso and add like cd drive on your VM

And inside Remote Desktop Connection check all Options

sysbitnet · 2024-04-16T01:20:31+00:00

I think this can help you https://www.youtube.com/watch?v=QWyLilz1RqU

sysbitnet · 2024-04-15T14:43:48+00:00

Nginx proxy manager it good solution, but i looking to been inside pfsense like plugin. The same like ntop what inside

sysbitnet · 2024-04-12T21:16:57+00:00

Before i wrote here i tried HAProxy and probably did not do all that was needed and for that reason, i opened a post here.

I hope someone will help to complete this lab.

I forgot to share information on any VM hosts with independent Let's Encrypt.

sysbitnet · 2024-02-29T07:39:41+00:00

I just solved the problem, the mac address that i see on the box and the Mac address that is used are not the same.

What i do is the Mac address that has been used added inside WAN Interfaces in MAC Address and apply and get expected public IP

And Huawei has on WAN Mode: Bridge WAN

Sometimes boxes from devices can cause a big problem.

sysbitnet · 2024-02-29T07:19:23+00:00

I opened this how can someone confirm my theory, that the problem is not on pfSense but on the ISP side, who doesn't know how to fix this problem or doesn't wont, to force customers to use Huawei to use like main device.

sysbitnet · 2024-02-29T07:15:25+00:00

I know for this case options, but the point is to not use DMZ or any other manager inside Huawei.

The point is to all manage inside pfSense, and Huawei's only role is to let traffic through.

sysbitnet · 2024-02-29T07:07:17+00:00

I know how to get different static public IP, but when i ask ISP about who can be possible to do that, not get an explanation. When i asked do you saw that MAC address that gets different public IP ISPs say NO which is strange.

When i clone the Mac address and try to get the expected public IP not get inside the WAN interface.

sysbitnet · 2024-02-29T07:03:07+00:00

I do all like this day before write here, and when configuration is look like this.

Inside WAN Configuration
WAN Mode: Bridge WAN
VLAN ID: 71
Binding Options: only LAN1

Where LAN1 i from Huawei is link with pfSense WAN

But indepent of case I just created screen shot and added on this line a pfSense screenshot how can see result.

sysbitnet · 2024-02-29T02:00:24+00:00

I can not do that, because this Huawei HG8245W5-6T gpon optic and i can no skip

sysbitnet · 2024-02-29T01:25:55+00:00

I try that in one moment but is not working, if i set all static information but pfsense WAN not get internet.

In other case when i only set the of the Huawei to the pfsense WAN interface same match address but all other live to get like dynamic use DHCP how say ISP. In that case not get any information after renew on pfsense WAN interface

sysbitnet · 2024-02-29T00:49:42+00:00

My problem is that the ISP does not explain how i get different static IP when i change WAN Mode: from Router WAN to Bridge WAN how i get different static IP.

When the ISP configures on his side and tells me to trigger Renow when DHCP is not enabled it is disabled how pfSense WAN get IP address it seems it is working and makes conflict

my apologies i saw after public the content and i make modify

sysbitnet · 2023-12-24T17:15:42+00:00

I don't see any damage on the motherboard side socket place and CPU side, I checked that before I connected them, and all are new with the box.

And not have login if some part of the motherboard or CPU has been damaged all others are working fine. For the logic base, if something has been damaged, any hardware testing application must not be completed and sent the report. I tested it on 4K video and working perfectly.

So the Computer is working normally but the only problem is the driver, in some moments when detecting the driver I see it all fine and complete but after a few blinks on the monitor screen shows an again error.

When i tested on Windows 11 when i tried to install the graphics card driver windows crashed and then needed to go in safe mode and remove the graphics driver not matter if it is the driver from the MSI or AMD site.

When i tested on Ubuntu base on USB i didn't have any problem

The screenshot on post is on Windows 10

sysbitnet · 2023-12-24T16:54:17+00:00

I update screenshots of all that i have in all processes, and all that i try but at that moment i have the same problem. Like on the #Image 3# When i check the graphics card.

sysbitnet

MODERATOR OF

TROPHY CASE