If you’re like me and run your own home server, you might find yourself needing to forward TCP ports 80 and 443 on your router. I recently changed my firewall from OpenWrt to OPNsense and obviously needed to forward ports 80 and 443 to my home server, a M1 Mac Mini running Fedora Asahi Remix.
By default, OPNsense tries to listen it’s web UI on all ports, well sort of. Many suggestions online say you should change the port the web UI listens on. I’ll tell you that suggestion doesn’t work for me at all.
If you need to port forward TCP ports 80 and 443 correctly, here’s what you need to do:
-
Log into your OPNsense web portal. Most likely it’s
192.168.1.1unless you changed it like me. -
Go to Firewall -> Settings -> Advanced on the sidebar
-
In the Network Address Translation section, check Reflection for port forwards and Automatic outbound NAT for Reflection and then click Save
-
Go to NAT -> Port Forward and add or edit your existing port forwards for 80 and 443
-
In the NAT reflection section, select Enable
-
When it asks you to save settings, select Apply changes
And that my friend is how to correctly forward Port 80 and 443 in OPNsense.