Project

General

Profile

Actions

Bug #7697

closed

NAT port forward rule using "WAN address" doesn't work as expected if router does not acquire a WAN address on startup

Added by Andy Wang almost 7 years ago. Updated over 4 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Rules / NAT
Target version:
-
Start date:
07/14/2017
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
Affected Architecture:

Description

This forum post:
https://forum.pfsense.org/index.php?topic=127585.msg733528#msg733528
Describes what I'm seeing:

This is pretty easy to reproduce.  I just started with a fresh pfsense install.  2.3.4
I have nothing wired to the router except for a single laptop on the LAN port.  WAN is configured for dhcp with no cable connected, so it's "down" and has no address.

Added the following rule (see attached screenshot)
interface: lan
protocol: tcp
source address: *
source ports: * 
Dest.Address: WAN address
Dest Port: 443
NAT IP: 192.168.1.12 - i picked a random address - actually it wasn't random, it was the example address on the rule page :)
NAT port: 443

I did this, applied the filter rules and within a short period of time the laptop was unable to reach the web ui.
From the pfsense console pfctl -d allowed me to reach it again.
Rebooted it and the same thing happened on the reboot.  There definitely appears to be a problem when 'WAN address' is not actually assigned.

The user PiBa has a github pull request that looks like a proper fix for this:
https://github.com/pfsense/pfsense/pull/3782

Actions #1

Updated by Pi Ba almost 7 years ago

The pull-request was pulled yesterday. https://github.com/pfsense/pfsense/commit/40c09b6dadb04928dc9a279969193b620ff1efad
If you've got the possibility perhaps you could confirm with latest 2.4beta its working properly now.?

Actions #2

Updated by Andy Wang almost 7 years ago

I'll try to test it out in the next couple of weeks hopefully. Thanks for the fix.

Actions #3

Updated by Jim Pingle over 4 years ago

  • Category set to Rules / NAT
  • Status changed from New to Resolved

Likely solved by the linked PR and no feedback either way from OP. Closing.

Actions

Also available in: Atom PDF