137 lines
3.3 KiB
Markdown
137 lines
3.3 KiB
Markdown
# UDM Pro Rules May Be Paused - Fix Guide
|
|
|
|
**Date**: 2026-01-21
|
|
**Issue**: Port forwarding rules exist but are not active
|
|
**Likely Cause**: Rules are **PAUSED**
|
|
|
|
---
|
|
|
|
## Problem Identified
|
|
|
|
From the UDM Pro Web UI screenshot, I can see:
|
|
- Port forwarding rules are configured correctly
|
|
- Rules show "Pause" and "Remove" buttons
|
|
- **Rules may be PAUSED** (which would explain why they're not active)
|
|
|
|
---
|
|
|
|
## Fix: Unpause Port Forwarding Rules
|
|
|
|
### Step 1: Check Rule Status
|
|
|
|
In the UDM Pro Web UI:
|
|
|
|
1. **Go to Port Forwarding**
|
|
- Settings → Firewall & Security → Port Forwarding
|
|
|
|
2. **Check Each Rule**
|
|
- Look at: **Nginx HTTPS (76.53.10.36)**
|
|
- Look at: **Nginx HTTP (76.53.10.36)**
|
|
- Look at: **Nginx Manager (76.53.10.36)**
|
|
|
|
3. **Check for Pause Status**
|
|
- If you see a **"Resume"** button → Rule is paused
|
|
- If you see a **"Pause"** button → Rule is active
|
|
|
|
### Step 2: Unpause Rules
|
|
|
|
For each port forwarding rule:
|
|
|
|
1. **Click on the rule** to open its configuration
|
|
2. **If you see "Resume" button**:
|
|
- Click **"Resume"** to activate the rule
|
|
- Rule should now show "Pause" button (indicating it's active)
|
|
3. **Save/Apply** changes
|
|
4. **Wait 30 seconds** for rules to apply
|
|
|
|
### Step 3: Verify Rules Are Active
|
|
|
|
After unpausing, verify via SSH:
|
|
|
|
```bash
|
|
ssh OQmQuS@192.168.11.1
|
|
|
|
# Check NAT rules (should show DNAT rules now)
|
|
sudo iptables -t nat -L PREROUTING -n -v | grep "76.53.10.36"
|
|
```
|
|
|
|
**Expected output (if working):**
|
|
```
|
|
DNAT tcp -- 0.0.0.0/0 76.53.10.36 tcp dpt:80 to:192.168.11.166:80
|
|
DNAT tcp -- 0.0.0.0/0 76.53.10.36 tcp dpt:443 to:192.168.11.166:443
|
|
```
|
|
|
|
---
|
|
|
|
## Alternative: Check Rule Status in List View
|
|
|
|
In the policy list view:
|
|
|
|
1. **Look at the "Action" column**
|
|
- Active rules should show "Translate" (for port forwarding)
|
|
- Paused rules might show differently or be grayed out
|
|
|
|
2. **Look for visual indicators**
|
|
- Active rules: Normal appearance
|
|
- Paused rules: May be grayed out, dimmed, or have a pause icon
|
|
|
|
---
|
|
|
|
## Verify Firewall Allow Rules
|
|
|
|
While checking port forwarding, also verify firewall rules:
|
|
|
|
1. **Go to Firewall Rules**
|
|
- Settings → Firewall & Security → Firewall Rules
|
|
|
|
2. **Check "Allow Port Forward..." rules**
|
|
- Should be **active** (not paused)
|
|
- Should be at the **top** of the list
|
|
|
|
3. **If paused, resume them**
|
|
- Click on each rule
|
|
- Click "Resume" if available
|
|
- Save changes
|
|
|
|
---
|
|
|
|
## Quick Checklist
|
|
|
|
- [ ] **Nginx HTTPS (76.53.10.36)** - Port 443 → **ACTIVE** (not paused)
|
|
- [ ] **Nginx HTTP (76.53.10.36)** - Port 80 → **ACTIVE** (not paused)
|
|
- [ ] **Nginx Manager (76.53.10.36)** - Port 81 → **ACTIVE** (if needed)
|
|
- [ ] **Allow Port Forward...** firewall rules → **ACTIVE** (not paused)
|
|
- [ ] **Allow rules are at top** of firewall rules list
|
|
- [ ] **All changes saved** and applied
|
|
|
|
---
|
|
|
|
## Test After Unpausing
|
|
|
|
```bash
|
|
# Test external access
|
|
curl -v http://76.53.10.36
|
|
curl -v https://76.53.10.36
|
|
curl -v http://explorer.d-bis.org
|
|
curl -v https://explorer.d-bis.org
|
|
```
|
|
|
|
---
|
|
|
|
## Summary
|
|
|
|
**Root Cause**: Port forwarding rules are **PAUSED** in UDM Pro Web UI
|
|
|
|
**Fix**:
|
|
1. Open each port forwarding rule
|
|
2. Click **"Resume"** to unpause
|
|
3. Save changes
|
|
4. Wait 30 seconds
|
|
5. Test external access
|
|
|
|
**After Fix**: External access should work immediately
|
|
|
|
---
|
|
|
|
**Status**: ⚠️ **RULES LIKELY PAUSED - UNPAUSE TO FIX**
|