Subj : pfsense port forwarding...
To   : Martin Kazmaier
From : Alan Ianson
Date : Wed Dec 25 2024 11:45 pm

> I can't see any specific differences in my port forwarding rules.  Some work,
> some don't.  Forwarding to port 940 (for my smtp port, relayed from another
> server), 110 for pop3 and port 119 (nntp) don't forward.  If I try to telnet
> to the local IPs and ports, it works, but not using the domain.  I'm behind a
> VPN, so it's not hairpinning.  All of the rest of my port forwarding rules
> work fine (I've got about 20 of them), except for these 3 and maybe one or 2
> others.  I can't see anything consistently wrong with them or the rules.
> Does anyone have any ideas?

I don't use pfsense so I don't know if this applies to your situation..

On linux ports <=1024 can only be opened by root. I use port 80 and 21 for my BBS so I use setcap to give my application (bbbsd in this case) the
capability to open and use these ports, like so..

sudo /sbin/setcap 'cap_net_bind_service=+ep' bbbsd

The above command will need to be run whenever your application is updated or reinstalled.

The Synchronet wiki talks about this and the authbind method to acheive this.

http://wiki.synchro.net/howto:linux_non-root

--- BBBS/Li6 v4.10 Toy-7
 * Origin: The Rusty MailBox - Penticton, BC Canada (1:153/757)

.