explorer-monorepo/UDM_PRO_RULES_PAUSED_FIX.md

UDM Pro Rules May Be Paused - Fix Guide

Date: 2026-01-21
Issue: Port forwarding rules exist but are not active
Likely Cause: Rules are PAUSED

---

Problem Identified

From the UDM Pro Web UI screenshot, I can see:

• Port forwarding rules are configured correctly
• Rules show "Pause" and "Remove" buttons
• Rules may be PAUSED (which would explain why they're not active)

---

Fix: Unpause Port Forwarding Rules

Step 1: Check Rule Status

In the UDM Pro Web UI:

1. Go to Port Forwarding

   • Settings → Firewall & Security → Port Forwarding

2. Check Each Rule

   • Look at: Nginx HTTPS (76.53.10.36)
   • Look at: Nginx HTTP (76.53.10.36)
   • Look at: Nginx Manager (76.53.10.36)

3. Check for Pause Status

   • If you see a "Resume" button → Rule is paused
   • If you see a "Pause" button → Rule is active

Step 2: Unpause Rules

For each port forwarding rule:

1. Click on the rule to open its configuration
2. If you see "Resume" button:
   • Click "Resume" to activate the rule
   • Rule should now show "Pause" button (indicating it's active)
3. Save/Apply changes
4. Wait 30 seconds for rules to apply

Step 3: Verify Rules Are Active

After unpausing, verify via SSH:

ssh OQmQuS@192.168.11.1

# Check NAT rules (should show DNAT rules now)
sudo iptables -t nat -L PREROUTING -n -v | grep "76.53.10.36"

Expected output (if working):

DNAT       tcp  --  0.0.0.0/0      76.53.10.36        tcp dpt:80  to:192.168.11.166:80
DNAT       tcp  --  0.0.0.0/0      76.53.10.36        tcp dpt:443 to:192.168.11.166:443

---

Alternative: Check Rule Status in List View

In the policy list view:

1. Look at the "Action" column

   • Active rules should show "Translate" (for port forwarding)
   • Paused rules might show differently or be grayed out

2. Look for visual indicators

   • Active rules: Normal appearance
   • Paused rules: May be grayed out, dimmed, or have a pause icon

---

Verify Firewall Allow Rules

While checking port forwarding, also verify firewall rules:

1. Go to Firewall Rules

   • Settings → Firewall & Security → Firewall Rules

2. Check "Allow Port Forward..." rules

   • Should be active (not paused)
   • Should be at the top of the list

3. If paused, resume them

   • Click on each rule
   • Click "Resume" if available
   • Save changes

---

Quick Checklist

• Nginx HTTPS (76.53.10.36) - Port 443 → ACTIVE (not paused)
• Nginx HTTP (76.53.10.36) - Port 80 → ACTIVE (not paused)
• Nginx Manager (76.53.10.36) - Port 81 → ACTIVE (if needed)
• Allow Port Forward... firewall rules → ACTIVE (not paused)
• Allow rules are at top of firewall rules list
• All changes saved and applied

---

Test After Unpausing

# Test external access
curl -v http://76.53.10.36
curl -v https://76.53.10.36
curl -v http://explorer.d-bis.org
curl -v https://explorer.d-bis.org

---

Summary

Root Cause: Port forwarding rules are PAUSED in UDM Pro Web UI

Fix:

1. Open each port forwarding rule
2. Click "Resume" to unpause
3. Save changes
4. Wait 30 seconds
5. Test external access

After Fix: External access should work immediately

---

Status: ⚠️ RULES LIKELY PAUSED - UNPAUSE TO FIX