EFW Support

Support => General Support => Topic started by: TheEricHarris on Thursday 30 December 2010, 05:52:44 pm



Title: Can't get SNAT to work
Post by: TheEricHarris on Thursday 30 December 2010, 05:52:44 pm
Rules that were imported from a backup work fine in my 2.4.1 box.  But if I try to create a new rule, it doesn't work.  I need SNAT to work.  I can get port forwarding to work when my server uses ENDIAN as it's default gateway, but that is not what I want.

In the previous version, there was a checkbox for SNAT and it automatically created the SNAT rules.  I've tried to manually create it and it doesn't work.

Anyone having this same issue?  Is there a workaround?


Title: Re: Can't get SNAT to work
Post by: TheEricHarris on Friday 31 December 2010, 04:01:07 am
Here is some more info.

I have two Endian Firewalls: 172.30.100.100 and 172.30.100.200

.100 is my primary firewall that is the default gateway in my level3 switch, so all outbound traffic goes through this.

I am trying to port forward an external IP (70.10.10.10) with port 443 to my Exchange server (172.30.100.31) on my secondary firewall (172.30.100.200).

So for this to work, I need to use SNAT because the traffic is coming in from the firewall that is not the default gateway.  I've had this working 2.2 with no issues.



Title: Re: Can't get SNAT to work
Post by: TheEricHarris on Friday 31 December 2010, 05:46:56 am
Here are some screen shots

In this test, I'm trying to get http://72.16.139.50:80 to port forward to 172.30.100.40:80.

SNAT does not work.  The Default GW on 172.30.100.40 is set to another Endian firewall box.


Title: Re: Can't get SNAT to work
Post by: TheEricHarris on Sunday 02 January 2011, 08:01:39 am
Got new rules to work by recreating them exactly like the imported ones (had to reinstall 2.4 and import my 2.2 backup).  Oh well!