Help. Can't NAT Nginx Proxy manager on pfSense

[oswaldocostaneto]

Hello everyone, this is my first post here, and I hope I'm following all the rules correctly.

I've recently migrated my Proxmox to use pfSense as a firewall(I was previously using OPNsense).
However, I'm running into issues getting the Nginx Proxy Manager to work with pfSense.

I have a domain from Cloudflare and there is no issue to reach my external ip address.

This is the general idea of my simple setup.



Everything was fine when configured by OPNsense, but after a random serious crash i decided to meka the change to pfSense.

But the things come difficult when i start to make the NAT and port forwarding rules, because i CAN'T reach my internal services. Every time i got the Error 522 from Cloudflare.

Below, I've outlined my current settings. I hope this information might be useful, and I'm looking forward to any assistance to resolve my problem.

• webConfigurator of pfSense with port changed (for not block 443 traffic)

• Port Forwarding NAT config

• Outbound NAT config

• Double check with Firewall Rules (automated NAT rules)

• Listening port state of the Nginx Proxy Manager host

• NAT configuration of firewall

• Example host config on Nginx Proxy Manager (1)

• Example host config on Nginx Proxy Manager (2)

• After all this, when i hit my website address from wan i got 522 error from Cloudflare

Thank you in advance for your help and suggestions!

 

[BashSmash]

Have you resolved this already?

Did you check your Cloudflare settings? Does it work with the setting DNS only instead of proxied?
What about under SSL/TLS settings and instead of setting it to Full (strict), you change it to Full?

I'm having the same problem, but I think it's related to something else.

Cheers.

 

[mthbrnr]

Any news on that? I am experiencing the same issues. I think that dnsbl is blocking some cloudflare ips but i'm not sure...Thanks!

 

[uricarbajal]

Having the same problem here. I even made the rule to let Nginx ==> any destination and the pfSense keeps blocking the ports to destination.