Can't get SNAT to work

[Guest]

[TheEricHarris]

Rules that were imported from a backup work fine in my 2.4.1 box.  But if I try to create a new rule, it doesn't work.  I need SNAT to work.  I can get port forwarding to work when my server uses ENDIAN as it's default gateway, but that is not what I want.

In the previous version, there was a checkbox for SNAT and it automatically created the SNAT rules.  I've tried to manually create it and it doesn't work.

Anyone having this same issue?  Is there a workaround?

[TheEricHarris]

Here is some more info.

I have two Endian Firewalls: 172.30.100.100 and 172.30.100.200

.100 is my primary firewall that is the default gateway in my level3 switch, so all outbound traffic goes through this.

I am trying to port forward an external IP (70.10.10.10) with port 443 to my Exchange server (172.30.100.31) on my secondary firewall (172.30.100.200).

So for this to work, I need to use SNAT because the traffic is coming in from the firewall that is not the default gateway.  I've had this working 2.2 with no issues.

[TheEricHarris]

Here are some screen shots

In this test, I'm trying to get http://72.16.139.50:80 to port forward to 172.30.100.40:80.

SNAT does not work.  The Default GW on 172.30.100.40 is set to another Endian firewall box.

[TheEricHarris]

Got new rules to work by recreating them exactly like the imported ones (had to reinstall 2.4 and import my 2.2 backup).  Oh well!