EFW Support

Support => General Support => Topic started by: Evangelion on Friday 23 October 2009, 01:21:27 am



Title: Port Forwarding
Post by: Evangelion on Friday 23 October 2009, 01:21:27 am
In Endian Port Forwarding equats to DNat ing ? correct ? Then why do all packets have the Source Address as the gateway for my DMZ ? The policy perviously had SNAT enable. but i modified the policy to disable this and it had no effect ?

Any ideas ?


Title: Re: Port Forwarding
Post by: mvrk on Saturday 24 October 2009, 01:06:46 am
Can someone help on how to forward for example port 80 from uplink zone to an IP from the green zone on this new interface :

(
    * Destination NAT
    * Source NAT
    * Incoming routed traffic
)


Title: Re: Port Forwarding
Post by: bayross on Wednesday 28 October 2009, 01:16:59 am
In Firewall, configure a Destination NAT rule as follows:
Access: ANY Uplink
Target: ANY Uplink
Service HTTP
Protocol: TCP
Target: 80
Translate to: TYPE IP
DNAT Policy: NAT
IP: {WEBSERVER IP on GREEN INTERFACE}
Port Range: 80

Save and apply rule

Then go to Firewall, configure System Access rule as follows:
Source Address: {leave blank}
Source Interface: RED
Service HTTP
Protocol: TCP
Target: 80
Policy: ACTION "ALLOW"

Save and apply and you should be good to go. You will now be able to access the specified webserver externally (Red zone to green zone)

*NOTE: It is recommened for security purposes to put Internet facing devices on the DMZ

Thanks,
Garrett