create_nat_port_forward
Set up a NAT port forwarding rule on pfSense to redirect incoming traffic on a specified interface and port to an internal host, with options for NAT reflection and automatic firewall rules.
Instructions
Create a NAT port forwarding rule
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| source | No | Source address filter (default: "any") | any |
| target | Yes | Internal host IP address or alias to forward to | |
| disabled | No | Whether the rule starts disabled | |
| protocol | Yes | Protocol (tcp, udp, tcp/udp) | |
| interface | Yes | Interface for the rule (typically "wan") | |
| local_port | Yes | Single port (80), range (8080-8090), or alias name | |
| description | No | Optional rule description | |
| destination | Yes | External address (e.g., "wanip", "any", or specific IP/alias) | |
| nat_reflection | No | NAT reflection mode (enable, disable, purenat) | |
| destination_port | Yes | Single port (80), range (8080-8090), or alias name. Do NOT pass multiple space/comma-separated ports — create a port alias first instead. | |
| apply_immediately | No | Whether to apply changes immediately | |
| create_associated_rule | No | Whether to create an associated firewall pass rule |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||