# UDM Pro Rules May Be Paused - Fix Guide

**Date**: 2026-01-21  
**Issue**: Port forwarding rules exist but are not active  
**Likely Cause**: Rules are **PAUSED**

---

## Problem Identified

From the UDM Pro Web UI screenshot, I can see:
- Port forwarding rules are configured correctly
- Rules show "Pause" and "Remove" buttons
- **Rules may be PAUSED** (which would explain why they're not active)

---

## Fix: Unpause Port Forwarding Rules

### Step 1: Check Rule Status

In the UDM Pro Web UI:

1. **Go to Port Forwarding**
   - Settings → Firewall & Security → Port Forwarding

2. **Check Each Rule**
   - Look at: **Nginx HTTPS (76.53.10.36)**
   - Look at: **Nginx HTTP (76.53.10.36)**
   - Look at: **Nginx Manager (76.53.10.36)**

3. **Check for Pause Status**
   - If you see a **"Resume"** button → Rule is paused
   - If you see a **"Pause"** button → Rule is active

### Step 2: Unpause Rules

For each port forwarding rule:

1. **Click on the rule** to open its configuration
2. **If you see "Resume" button**:
   - Click **"Resume"** to activate the rule
   - Rule should now show "Pause" button (indicating it's active)
3. **Save/Apply** changes
4. **Wait 30 seconds** for rules to apply

### Step 3: Verify Rules Are Active

After unpausing, verify via SSH:

```bash
ssh OQmQuS@192.168.11.1

# Check NAT rules (should show DNAT rules now)
sudo iptables -t nat -L PREROUTING -n -v | grep "76.53.10.36"
```

**Expected output (if working):**
```
DNAT       tcp  --  0.0.0.0/0      76.53.10.36        tcp dpt:80  to:192.168.11.166:80
DNAT       tcp  --  0.0.0.0/0      76.53.10.36        tcp dpt:443 to:192.168.11.166:443
```

---

## Alternative: Check Rule Status in List View

In the policy list view:

1. **Look at the "Action" column**
   - Active rules should show "Translate" (for port forwarding)
   - Paused rules might show differently or be grayed out

2. **Look for visual indicators**
   - Active rules: Normal appearance
   - Paused rules: May be grayed out, dimmed, or have a pause icon

---

## Verify Firewall Allow Rules

While checking port forwarding, also verify firewall rules:

1. **Go to Firewall Rules**
   - Settings → Firewall & Security → Firewall Rules

2. **Check "Allow Port Forward..." rules**
   - Should be **active** (not paused)
   - Should be at the **top** of the list

3. **If paused, resume them**
   - Click on each rule
   - Click "Resume" if available
   - Save changes

---

## Quick Checklist

- [ ] **Nginx HTTPS (76.53.10.36)** - Port 443 → **ACTIVE** (not paused)
- [ ] **Nginx HTTP (76.53.10.36)** - Port 80 → **ACTIVE** (not paused)
- [ ] **Nginx Manager (76.53.10.36)** - Port 81 → **ACTIVE** (if needed)
- [ ] **Allow Port Forward...** firewall rules → **ACTIVE** (not paused)
- [ ] **Allow rules are at top** of firewall rules list
- [ ] **All changes saved** and applied

---

## Test After Unpausing

```bash
# Test external access
curl -v http://76.53.10.36
curl -v https://76.53.10.36
curl -v http://explorer.d-bis.org
curl -v https://explorer.d-bis.org
```

---

## Summary

**Root Cause**: Port forwarding rules are **PAUSED** in UDM Pro Web UI

**Fix**: 
1. Open each port forwarding rule
2. Click **"Resume"** to unpause
3. Save changes
4. Wait 30 seconds
5. Test external access

**After Fix**: External access should work immediately

---

**Status**: ⚠️ **RULES LIKELY PAUSED - UNPAUSE TO FIX**