Lost on port forwarding with pfSense and VPN

So, I have qBittorrent running in a container on a machine in my network. That machine heads out through an OpenVPN gateway on my pfSense firewall connected to Proton VPN.

My Proton VPN client username includes +pmp. I copied the info out of an ovpn configuration for a set of servers that had the double arrow to indicate it supports P2P traffic. I have a paid account.

I have qBittorent listening on a random port (say 6666). The container exposes port 6666 over the default bridge network.

I have a port forward rule set up on the NAT Port Forward page that maps any source IP/Port coming in on the VPN interface over TCP/UDP to the VPN address on port 6666 to the host machine IP on 6666.

I have a rule on both the VPN and LAN interfaces allowing IPv4 TCP/UDP traffic from any source to the host machine over port 6666. (I’d like to have that locked down by gateway, but I opened it up on the LAN interface in trying to get this to work, same reason I have UDP enabled as well).

There is no traffic and no connections through either rule. I’m obviously missing something basic, but I have no idea what. Any ideas?

EDIT: I made these changes in the Advanced settings:

  • Enabled "Reannounce to all trackers when IP or port changed"
  • Set the VPN IP in “IP address reported to trackers (requires restart)”

I then restarted the container. Doesn’t seem to have made a difference, though.

harsh3466,

I was just setting up port forwarding with protonvpn the other night. My qbittorrent is not in a container, however, I think the key is the instructions I followed on this support page:

protonvpn.com/…/port-forwarding-manual-setup/

Specifically starting with: “Step 2: How to use port forwarding”

matey, (edited )

It looks like those instructions are for if you’re having NAT-PMP poke a hole in the firewall for you. I’m trying to set an explicit forwarded port so I don’t need to enable NAT-PMP.

EDIT: Though, even turning NAT-PMP on, I can’t get it working. sigh (And natpmpc won’t return a positive response.)

harsh3466,

Gotcha. Unfortunately, that exhausts my knowledge of it. I hope you get it figured out!

Did you try contacting proton for support?

matey,

That’s… actually a pretty good idea.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • uselessserver093
  • Food
  • aaaaaaacccccccce
  • [email protected]
  • test
  • CafeMeta
  • testmag
  • MUD
  • RhythmGameZone
  • RSS
  • dabs
  • Socialism
  • KbinCafe
  • TheResearchGuardian
  • Ask_kbincafe
  • oklahoma
  • feritale
  • SuperSentai
  • KamenRider
  • All magazines