pfSense port forwarding issues

K9SO

I have been using pfSense as my router for many years successfully and have been using SmartLink for remote access. I currently run SmartSDR 3.7.4 with a 6600 at a Wisconsin location.

Very suddenly, SmartLink fails to connect (…and the TEST button in setup fails). Discovery is OK and all my radios are visible on startup.

I can connect to the radios from within the LAN, but port forwarding in pfSense no longer seems to be working with SmartLink. I've been through all the settings. Nothing seems to have changed, and pfSense hasn't pushed any upgrades lately.

UPnP works and connects when I turn that on, but Manual Port Forwarding in SmartLink does not work w/o UPnP enabled in the pfSense router. For security reasons, I don't want to enable UPnP permanently.

I've tried multiple client hardware (PCs, Maestros, etc.) different ISPs and network locations.

I have a completely different system using pfSense in a different location with a 6500 in North Carolina. It, too, has recently failed in the same way.

Any suggestions? I've opened a ticket, but the suggestion after multiple exchanges was to post here hoping to find some pfSense help as we've reached a dead end.

Fred

K9SO

Mike-VA3MW

Hi Fred

If you test with full automatic mode, does SmartLink work correctly?

Most of us run pfSense all the time with uPNP turned on. We appreciate you want to keep it off.

This is my DX Cluster rule and it continues to work every day. Make sure this setting is not set to None or your NAT rule will be blocked.

Mike

K9SO

Ki Mike,

My big confusion is that I've been using pfSense with port forwarding for years at both of my locations. Both suddenly stopped working recently … with PCs, Maestros, other networks … nothing. I was able to see the radio discovery panels, but it wouldn't connect through SmartLink. I had not changed anything.

When I turned on UPnP, everything worked.

Putting that aside, Tim hooked me up with Ken who introduced me to pfSense's Access Control Links feature under the UPnP service. This allows users to limit what UPnP will do and what ports it will open up. I set that up and designated the appropriate ports and everything is working (with UPnP of course).

I view this limited UPnP method to be about the same security risk as standard port forwarding which I have been living with even before SmartLink came into being. Certainly not as bad as wide open UPnP. So I guess I'm done, but still curious as to what changed.

I must say that even though I realize this isn't within the typical radio support scope, you guys have been incredibly helpful. Thank you for that!

Hope to catch you on Field Day this weekend. We're doing a big club FlexRadio capability demonstration from a nearby park running 3 different stations using Maestros, two of which will be linked to my base stations over cellular. We'll be using our club call, K9SOB 😎 1D out of Wisconsin on a 6600, K9SO 1D out of North Carolina on a 6500, and KR9RK 1A locally (on site antennas) on a 6500.

73,

Fred, K9SO

K9SO

Sorry, I didn't answer your question: No, it doesn't work in automatic mode either.

Fred

K9SO

Mike-VA3MW

Hi Fred

I won't be on for FD as I am travelling to Germany. Maybe next year.

Best of luck with everything.

73