Skip to content

Port Forward

We will forward a port from pfSense’s external IP to an internal IP. For example if you want to expose a web service on port 443 on your external IP and internal server is running on port 5000.

Navigate to Firewall -> NAT -> Port Forward

  • Click ⤵️Add
  • Interface: WAN
  • Address Family: IPv4
  • Protocol: TCP (Change this depending on your use case)
  • Destination: WAN address
  • Destination port range:
    • From port: 443
    • To port: 443
  • Redirect Target IP: 10.1.1.50 (Change this to your internal’s server IP address)
  • Redirect target port: 5000
  • Click 💾Save

fw-port-forward

Or if you want to expose a range of ports… eg External 20000-20050 to Internal 30000-30050

  • Click ⤵️Add
  • Interface: WAN
  • Address Family: IPv4
  • Protocol: TCP (Change this depending on your use case)
  • Destination: WAN address
  • Destination port range:
    • From port: 20000
    • To port: 20050
  • Redirect Target IP: 10.1.1.50 (Change this to your internal’s server IP address)
  • Redirect target port: 30000 (You only specify the starting port here)
  • Click 💾Save

fw-port-forward-range