Can someone explain Incoming Routed Traffic and how to setup

[Guest]

[bangsters]

How exactly is Incoming Routed Traffic setup and how is it different from Destination NAT?  Also, how do I configure it?  There is only an option for source and target.  There is not option for destination....

Example, my firewall is assigned 1 extra public IP, 66.55.77.88.  How do I use that IP and have all traffic sent to my webserver?  Does the webserver need to be assigned this IP in it's nic settings (which will defeat the purpose of the firewall), or have it assigned a private IP (which in this case, DNAT will be used).... so how exactly can I use incoming routed traffic?? I'd like to use this over DNAT as DNAT cannot do 1:1 or symmetrical NAT and we have issues with it and our sip servers.

Thanks

 

[bangsters]

bump anyone?  I read the docs and it's very brief and unclear.

[bangsters]

anyone please?

[arminf]

Hi Bangsters

i route port 6881 to an internal address on my green network.
no worry its a virtual machine ;-)

This is my setup. Should work for you also.

Outgoing firewall configuration
outgoing traffic my server ip to RED any port/protocol  -> there you would use 80/443 + check your proxy server ip default 8080

Incoming firewall configuration
Incoming routed traffic to my server ip port 6881 -> there you would use 80/443

My application is working. Only issue i have the traffic is scanned for IDS which classify the app as attack :-(
Good Luck!
regards armin

[bangsters]

thanks.

how exactly did you setup the incoming, particularly source and destination fields?  Do I need to put my public IP in the source, and the private IP in destination?

Also, do I need to put anything in the DNAT tab for this as well?  I assume you have the virtual server configured with a private IP (the same IP in the destination of incoming routed traffic?)?

Thanks