Port Forwarding problem w/EFW 2.3 and 2.4.1

[Guest]

[diego1989]

I have a lot of firewalls working in production in some enterprises with the same problem.

When I add rules into "NAT/Port Forwarding" tab, some ports redirected seem open and works, but others don't, specially the web ports (80, 443, 8080), but the system access rule for the 10443 port runs good.

I have read an article that speaks about two possible solutions to this problem (kb.endian.com/entry/15/), but it hasn't fix the efw problem.

The rule from a one of EFWs that I manage:

#    Target    Service    Policy    Translate to    Remark    Actions
1    Uplink ANY    TCP/80    ALLOW    192.168.50.5    DVR    
     Access from:    Uplink ANY


In that LAN, the host 192.168.50.5 has port 80 open and a daemon listens that port, locally it's possible to enter with a web browser to http: //192.168.50.5.

Excuse my bad English, i'm not a native English writer.

[diego1989]

I'll answer my own question... the trouble happens when I try to do DNAT from any EFW box, to a VM over XEN.

The XEN and the destintation Virtual Machine is the problem.

I hope that post has helped someone!

Consider this issue as closed.-