Port Forward Troubleshooting Guide - Revision history

Dmorris at 06:06, 29 November 2018

2018-11-29T06:06:45Z

← Older revision		Revision as of 06:06, 29 November 2018
Line 8:		Line 8:
	# Test your (TCP) port forward using 'telnet.' In windows you can run start->run and then you can type telnet 1.2.3.4 123 where 1.2.3.4 is your external IP and 123 is the port your port forward rule matches. If it connects and hangs then the port forward is working. If it fails to connect then your port forward is not working.		# Test your (TCP) port forward using 'telnet.' In windows you can run start->run and then you can type telnet 1.2.3.4 123 where 1.2.3.4 is your external IP and 123 is the port your port forward rule matches. If it connects and hangs then the port forward is working. If it fails to connect then your port forward is not working.
	# Test your rule from the outside. Port forwarding back inside the network has extra complications. First verify that it works from the outside.		# Test your rule from the outside. Port forwarding back inside the network has extra complications. First verify that it works from the outside.
	# Verify there is a session shown in Reports > [http://demo.untangle.com/admin/index.do#reports?cat=network&rep=port-forwarded-sessions Port Forwarded Sessions]''		# Verify there is a session shown in Reports > Network > [http://demo.untangle.com/admin/index.do#reports?cat=network&rep=port-forwarded-sessions Port Forwarded Sessions]''
	# Verify that Untangle can connect to the final destination. Use the ''Connection Test'' in ''Troubleshooting' or open the console on Untangle and type 'telnet 192.168.1.10 123' where 192.168.1.10 is the internal server you are forwarding to and 123 is the port. If it connects then Untangle can reach the server. If it fails to connect Untangle can't reach the server and the port forward will probably not function until this part is working.		# Verify that Untangle can connect to the final destination. Use the ''Connection Test'' in ''Troubleshooting' or open the console on Untangle and type 'telnet 192.168.1.10 123' where 192.168.1.10 is the internal server you are forwarding to and 123 is the port. If it connects then Untangle can reach the server. If it fails to connect Untangle can't reach the server and the port forward will probably not function until this part is working.
	# For testing, turn off the [[Firewall]] and [[Captive Portal]] applications if you have them installed. Port forwarded sessions will not connect if they are blocked by an application. If you have many policies, verify which policy is processing the session and make sure you disable the correct apps.		# For testing, turn off the [[Firewall]] and [[Captive Portal]] applications if you have them installed. Port forwarded sessions will not connect if they are blocked by an application. If you have many policies, verify which policy is processing the session and make sure you disable the correct apps.

Dmorris at 06:06, 29 November 2018

2018-11-29T06:06:28Z

← Older revision		Revision as of 06:06, 29 November 2018
Line 8:		Line 8:
	# Test your (TCP) port forward using 'telnet.' In windows you can run start->run and then you can type telnet 1.2.3.4 123 where 1.2.3.4 is your external IP and 123 is the port your port forward rule matches. If it connects and hangs then the port forward is working. If it fails to connect then your port forward is not working.		# Test your (TCP) port forward using 'telnet.' In windows you can run start->run and then you can type telnet 1.2.3.4 123 where 1.2.3.4 is your external IP and 123 is the port your port forward rule matches. If it connects and hangs then the port forward is working. If it fails to connect then your port forward is not working.
	# Test your rule from the outside. Port forwarding back inside the network has extra complications. First verify that it works from the outside.		# Test your rule from the outside. Port forwarding back inside the network has extra complications. First verify that it works from the outside.
	# Verify there is ~~an port forward event~~ in Reports > [http://demo.untangle.com/admin/index.do#reports?cat=network&rep=port-forwarded-sessions Port Forwarded Sessions]''		# Verify there is a session shown in Reports > [http://demo.untangle.com/admin/index.do#reports?cat=network&rep=port-forwarded-sessions Port Forwarded Sessions]''
	# Verify that Untangle can connect to the final destination. Use the ''Connection Test'' in ''Troubleshooting' or open the console on Untangle and type 'telnet 192.168.1.10 123' where 192.168.1.10 is the internal server you are forwarding to and 123 is the port. If it connects then Untangle can reach the server. If it fails to connect Untangle can't reach the server and the port forward will probably not function until this part is working.		# Verify that Untangle can connect to the final destination. Use the ''Connection Test'' in ''Troubleshooting' or open the console on Untangle and type 'telnet 192.168.1.10 123' where 192.168.1.10 is the internal server you are forwarding to and 123 is the port. If it connects then Untangle can reach the server. If it fails to connect Untangle can't reach the server and the port forward will probably not function until this part is working.
	# For testing, turn off the [[Firewall]] and [[Captive Portal]] applications if you have them installed. Port forwarded sessions will not connect if they are blocked by an application. If you have many policies, verify which policy is processing the session and make sure you disable the correct apps.		# For testing, turn off the [[Firewall]] and [[Captive Portal]] applications if you have them installed. Port forwarded sessions will not connect if they are blocked by an application. If you have many policies, verify which policy is processing the session and make sure you disable the correct apps.

Dmorris at 06:05, 29 November 2018

2018-11-29T06:05:55Z

← Older revision		Revision as of 06:05, 29 November 2018
Line 8:		Line 8:
	# Test your (TCP) port forward using 'telnet.' In windows you can run start->run and then you can type telnet 1.2.3.4 123 where 1.2.3.4 is your external IP and 123 is the port your port forward rule matches. If it connects and hangs then the port forward is working. If it fails to connect then your port forward is not working.		# Test your (TCP) port forward using 'telnet.' In windows you can run start->run and then you can type telnet 1.2.3.4 123 where 1.2.3.4 is your external IP and 123 is the port your port forward rule matches. If it connects and hangs then the port forward is working. If it fails to connect then your port forward is not working.
	# Test your rule from the outside. Port forwarding back inside the network has extra complications. First verify that it works from the outside.		# Test your rule from the outside. Port forwarding back inside the network has extra complications. First verify that it works from the outside.
	# Verify there is an port forward event in ~~[[Config]]~~ > [~~[Network]] > ''Reports'' > ''~~Port Forwarded Sessions.''		# Verify there is an port forward event in Reports > [http://demo.untangle.com/admin/index.do#reports?cat=network&rep=port-forwarded-sessions Port Forwarded Sessions]''
	# Verify that Untangle can connect to the final destination. Use the ''Connection Test'' in ''Troubleshooting' or open the console on Untangle and type 'telnet 192.168.1.10 123' where 192.168.1.10 is the internal server you are forwarding to and 123 is the port. If it connects then Untangle can reach the server. If it fails to connect Untangle can't reach the server and the port forward will probably not function until this part is working.		# Verify that Untangle can connect to the final destination. Use the ''Connection Test'' in ''Troubleshooting' or open the console on Untangle and type 'telnet 192.168.1.10 123' where 192.168.1.10 is the internal server you are forwarding to and 123 is the port. If it connects then Untangle can reach the server. If it fails to connect Untangle can't reach the server and the port forward will probably not function until this part is working.
	# For testing, turn off the [[Firewall]] and [[Captive Portal]] applications if you have them installed. Port forwarded sessions will not connect if they are blocked by an application. If you have many policies, verify which policy is processing the session and make sure you disable the correct apps.		# For testing, turn off the [[Firewall]] and [[Captive Portal]] applications if you have them installed. Port forwarded sessions will not connect if they are blocked by an application. If you have many policies, verify which policy is processing the session and make sure you disable the correct apps.

Dmorris at 04:21, 29 November 2018

2018-11-29T04:21:25Z

← Older revision		Revision as of 04:21, 29 November 2018
Line 10:		Line 10:
	# Verify there is an port forward event in [[Config]] > [[Network]] > ''Reports'' > ''Port Forwarded Sessions.''		# Verify there is an port forward event in [[Config]] > [[Network]] > ''Reports'' > ''Port Forwarded Sessions.''
	# Verify that Untangle can connect to the final destination. Use the ''Connection Test'' in ''Troubleshooting' or open the console on Untangle and type 'telnet 192.168.1.10 123' where 192.168.1.10 is the internal server you are forwarding to and 123 is the port. If it connects then Untangle can reach the server. If it fails to connect Untangle can't reach the server and the port forward will probably not function until this part is working.		# Verify that Untangle can connect to the final destination. Use the ''Connection Test'' in ''Troubleshooting' or open the console on Untangle and type 'telnet 192.168.1.10 123' where 192.168.1.10 is the internal server you are forwarding to and 123 is the port. If it connects then Untangle can reach the server. If it fails to connect Untangle can't reach the server and the port forward will probably not function until this part is working.
	# For testing, turn off the [[Firewall]] and [[Captive Portal]] applications if you have them installed. Port forwarded sessions will not connect if they are blocked by an application.		# For testing, turn off the [[Firewall]] and [[Captive Portal]] applications if you have them installed. Port forwarded sessions will not connect if they are blocked by an application. If you have many policies, verify which policy is processing the session and make sure you disable the correct apps.
	# Simplify your port forward rule. Remove extra qualifiers and make it contain as few as possible. For example specify just what port to forward and "Destined Local" and then which server to forward it to. If that works then add the extra qualifiers back one at a time testing each time.		# Simplify your port forward rule. Remove extra qualifiers and make it contain as few as possible. For example specify just what port to forward and "Destined Local" and then which server to forward it to. If that works then add the extra qualifiers back one at a time testing each time.
	# If you are port forwarding port 443 (HTTPS), try moving Untangle administration to another port so port 443 is available to be forwarded.		# If you are port forwarding port 443 (HTTPS), try moving Untangle administration to another port so port 443 is available to be forwarded.

Dmorris at 20:24, 13 June 2017

2017-06-13T20:24:59Z

← Older revision		Revision as of 20:24, 13 June 2017
Line 4:		Line 4:

	# Read the [[Port Forwarding FAQs]]		# Read the [[Port Forwarding FAQs]]
	# Verify that the destination host on the inside is using the Untangle as its default gateway. If not the packets won't find their way back to Untangle.		# Verify that the destination host on the inside is using the Untangle as its default gateway. If not the reply packets won't find their way back to Untangle.
	# Verify that the destination service is reachable from the '''inside''' on the IP and port specified in your port forward rule.		# Verify that the destination service is reachable from the '''inside''' on the IP and port specified in your port forward rule.
	# Test your (TCP) port forward using 'telnet.' In windows you can run start->run and then you can type telnet 1.2.3.4 123 where 1.2.3.4 is your external IP and 123 is the port your port forward rule matches. If it connects and hangs then the port forward is working. If it fails to connect then your port forward is not working.		# Test your (TCP) port forward using 'telnet.' In windows you can run start->run and then you can type telnet 1.2.3.4 123 where 1.2.3.4 is your external IP and 123 is the port your port forward rule matches. If it connects and hangs then the port forward is working. If it fails to connect then your port forward is not working.

Dmorris at 04:32, 26 July 2016

2016-07-26T04:32:49Z

← Older revision		Revision as of 04:32, 26 July 2016
Line 5:		Line 5:
	# Read the [[Port Forwarding FAQs]]		# Read the [[Port Forwarding FAQs]]
	# Verify that the destination host on the inside is using the Untangle as its default gateway. If not the packets won't find their way back to Untangle.		# Verify that the destination host on the inside is using the Untangle as its default gateway. If not the packets won't find their way back to Untangle.
	# Verify that the destination service is reachable from the '''inside''' on the IP and port specified in your port forward rule. ~~Many hours have been wasted on troubleshooting port forwards when the destination is not configured correctly.~~		# Verify that the destination service is reachable from the '''inside''' on the IP and port specified in your port forward rule.
	# Test your (TCP) port forward using 'telnet.' In windows you can run start->run and then you can type telnet 1.2.3.4 123 where 1.2.3.4 is your external IP and 123 is the port your port forward rule matches. If it connects and hangs then the port forward is working. If it fails to connect then your port forward is not working.		# Test your (TCP) port forward using 'telnet.' In windows you can run start->run and then you can type telnet 1.2.3.4 123 where 1.2.3.4 is your external IP and 123 is the port your port forward rule matches. If it connects and hangs then the port forward is working. If it fails to connect then your port forward is not working.
	# Test your rule from the outside. Port forwarding back inside the network has extra complications. First verify that it works from the outside.		# Test your rule from the outside. Port forwarding back inside the network has extra complications. First verify that it works from the outside.

Dmorris at 16:01, 5 November 2015

2015-11-05T16:01:45Z

New page

<span style="display:none" class="helpSource port_forward_troubleshooting_guide">Port_Forward_Troubleshooting_Guide</span>

Port forwards can be tricky. Below is a series of suggestions about getting port forwards to work.

# Read the [[Port Forwarding FAQs]]
# Verify that the destination host on the inside is using the Untangle as its default gateway. If not the packets won't find their way back to Untangle.
# Verify that the destination service is reachable from the '''inside''' on the IP and port specified in your port forward rule. Many hours have been wasted on troubleshooting port forwards when the destination is not configured correctly.
# Test your (TCP) port forward using 'telnet.' In windows you can run start->run and then you can type telnet 1.2.3.4 123 where 1.2.3.4 is your external IP and 123 is the port your port forward rule matches. If it connects and hangs then the port forward is working. If it fails to connect then your port forward is not working.
# Test your rule from the outside. Port forwarding back inside the network has extra complications. First verify that it works from the outside.
# Verify there is an port forward event in [[Config]] > [[Network]] > ''Reports'' > ''Port Forwarded Sessions.''
# Verify that Untangle can connect to the final destination. Use the ''Connection Test'' in ''Troubleshooting' or open the console on Untangle and type 'telnet 192.168.1.10 123' where 192.168.1.10 is the internal server you are forwarding to and 123 is the port. If it connects then Untangle can reach the server. If it fails to connect Untangle can't reach the server and the port forward will probably not function until this part is working.
# For testing, turn off the [[Firewall]] and [[Captive Portal]] applications if you have them installed. Port forwarded sessions will not connect if they are blocked by an application.
# Simplify your port forward rule. Remove extra qualifiers and make it contain as few as possible. For example specify just what port to forward and "Destined Local" and then which server to forward it to. If that works then add the extra qualifiers back one at a time testing each time.
# If you are port forwarding port 443 (HTTPS), try moving Untangle administration to another port so port 443 is available to be forwarded.
# Remove any ''Source Address'' and ''Source Interface'' qualifiers - 99% of the time these are misused.
# For advanced users, use tcpdump or the ''Packet Test'' in troubleshooting to debug and watch the packets. To test with tcpdump run these commands: ''tcpdump -i eth0 -n "port 123"'' and ''tcpdump -i eth1 -n "port 123"'' - assuming eth0 is your outside interface and eth1 is your inside interface.
# Still not working? Post a '''screenshot''' of your port forward rule to the [http://forums.untangle.com forums] along with '''the results from the above tests''' and ask for help.