Destination NAT - Redirect external request (from GREEN) to an internal LAN IP

[Guest]

[martec]

Hi at all,

i would like to redirect outgoing ftp request (from green zone to a specific external ip), to a specific internal ip's client...
Example: (from GREEN) outgoing ftp request to 85.18.1.2, redirect to 192.168.32.1 (client in green zone)

I made this rule in Firewall --> Destination NAT (port fowarding / NAT)

Access FROM: Green
Destination: 85.18.1.2
Policy: Accept (ISP)
Services: FTP
Protocol: TCP
Port: 21
Dnat policy: NAT
Dnat IP: 192.168.32.1


but this don't work... the rule it's in first position, 192.168.32.1 it's an ip's client in green zone (static ip)...
Can someone tell me where i worng?

Many thanks at all for reading the post...
Bye!

[jmario]

Hello,

For your Ftp-pc ist the endian-box the default route ?
If not, that's the problem.

A+,

[yhenao]

Hi,

Acces from: GREEN, I thikn this is problem,external interface  should be the source

Regards ,

Yamidt Henao

[martec]

Hi, thanks for replay and sorry for my later reading...

@yhenao: I try to modify rule, redirect request from green to router internal ip (and to endian external ip), but don't work...

Well, i have this infrastructure in my office:

                                                |pc1|
...|router|------|endian|---------|
                                                |ftp server|

when out of office try to connect to 85.18.1.2 in ftp mode, i can connect to my ftp-server, but if i try to connect from pc1 to ftp server (call 85.18.1.2, not the lan ip or server name) ican't connect...

I need to redirect request from 192.168.32.x to 85.18.1.2:21, in a request from 192.168.32.x to 192.168.32.100:21 how can i do?
Thanks at all... bye.