Loopback through WAN?

[Guest]

[chelcorob]

Hi

We have just switched over to Endian from an old SonicWall and we are trying to setup some sort of loopback rule, so that if a user tries to connect to our external IP when they are inside the network, it will connect and go through the relevant port forwarding rule to the correct destination.

For example we have some users with laptops who occasionally work from home so their email client is set to the WAN IP, but when they bring the laptop into the office they are unable to connect to the mail server without changing their email client to the LAN IP of the mail server.

This used to work fine on our old SonicWall but I don't know how it was setup so I'm not sure where I would need to look in Endian to do the same thing.

We are using 2.2 RC3.

[wharfratjoe]

Try adding a new host and point it to the Internal IP

Network > Host configuration

Example:

Ip: 192.168.1.5 hostname: mailserver_name domain: external_domain_name

I had to do this for https webmail server to resolve internally, so we could check emails if needed from the web.

[zman818]

Unfortunately this approach doesn't allow port forwarding to be honored.

For example... if I'm forwarding    external:40080==>192.168.0.1:80   I'm unable to use the internal IP.  This is awkward at best (I have to remember to type in the internal IP) or impossible at worst (embedded links with the external IP no longer work).

Any tricks to get loopback routing to work?  Thanks.

[brian2019]

could you combine that first response with an internal redirection?

192.168.1.1 is the endian firewall

Network > Host configuration

Ip: 192.168.1.1 hostname: mailserver_name domain: external_domain_name
-------

and then port forward from 192.168.1.1:40080 to 192.168.1.5:80
-------
I'm making this up as I go..

[npeterson]

On the port forwarding rule, Do you only have the outside ip set to <ANY> or <ANY uplink>? I would assume you need to set it to ANY to catch all interfaces. Otherwise you will need to add a iptables entry to rc.firewall.local

[dorf]

I'm having a similar issue, I recently posted about it in the VPN area because I'm not sure if my PPTP problem is related but....

I have a laptop and a desktop, when I'm out & about with the laptop I can connect back to the desktop with RDP using the FQDN or it's IP.  Previous to Endian I was able to do this from inside the LAN when using the laptop here.  I cannot do that any longer.  My previous firewall was IPCop, which is the base for Endian, so I'm at a loss as to why it wouldn't work.  Anyone have ideas?

thanks,

rjv

[Caizi]

Same problem

In previus versions of Endian Firewall (like 2.0 / 2.1.x) it worked automatically without special setting. So why there is this change of NAT loopback behaviour in 2.2 version? I believed that this is problem only of RC version, but not :-(

Please does somebody know how to correct this?

Thanks.