Port Forwarding

[Guest]

[Evangelion]

In Endian Port Forwarding equats to DNat ing ? correct ? Then why do all packets have the Source Address as the gateway for my DMZ ? The policy perviously had SNAT enable. but i modified the policy to disable this and it had no effect ?

Any ideas ?

[mvrk]

Can someone help on how to forward for example port 80 from uplink zone to an IP from the green zone on this new interface :

(
    * Destination NAT
    * Source NAT
    * Incoming routed traffic
)

[bayross]

In Firewall, configure a Destination NAT rule as follows:
Access: ANY Uplink
Target: ANY Uplink
Service HTTP
Protocol: TCP
Target: 80
Translate to: TYPE IP
DNAT Policy: NAT
IP: {WEBSERVER IP on GREEN INTERFACE}
Port Range: 80

Save and apply rule

Then go to Firewall, configure System Access rule as follows:
Source Address: {leave blank}
Source Interface: RED
Service HTTP
Protocol: TCP
Target: 80
Policy: ACTION "ALLOW"

Save and apply and you should be good to go. You will now be able to access the specified webserver externally (Red zone to green zone)

*NOTE: It is recommened for security purposes to put Internet facing devices on the DMZ

Thanks,
Garrett