Internal access to internal server through External IP (loopback NAT)

[Guest]

[maxim]

Ok, server located at 192.168.0.6

I am located at 192.168.0.253.

The port is 80.

Port forwarding setup from red:80 to 192.168.0.6:80.

Access red:80 from green, EFW somehow translates that to access to the GREEN interface, but at the IP of red.

So in my browser is the RED IP, and on my screen is EFW's web login screen which is not available from RED.

I want to be able to access the service on 192.168.0.6 through normal means, without jumping through hoops such at modifying my hosts file, or setting up a hosts record on EFW.

[rwebb616]

I didn't see your post before I posted mine - I'm having the same issue.  I did not have the problem in 2.1.2.  Generally speaking 2.3 seems to be quite a bit more buggy than 2.1.2 was.  I'm having problems with the DHCP settings as well - which is apparently fixed in 2.3.1 but I don't have a way to get that either.

-Rich

[Steve]

If I understand your problem correctly,
You want to access your Internal webserver (On Green) from another machine on the Green network,
BUT you want to use your Public IP address.

In Firewall > Port forwarding / NAT > Destination NAT
Try this:

[rwebb616]

It looks like I was able to get it to work by adding a source nat rule:

Network:  192.168.x.0/24
Destination: GREEN
Service:  <ANY>
Nat To:  Auto

The GREEN network in this case would be the same as the network. 

I don't know why this is needed or works, but it does.

-Rich

[maxim]

I have applied both of these settings. The behavior is still the same. I find the behavior very odd. Thank you for your replies. I'll be installing some new hardware this weekend with 2.3 Final on it. The current system I have has 2.3RC1.

[maxim]

I finally got around to swapping out the hardware today and the 2.3 final doesn't not appear to have an issue performing this task.

[kboddy]

Hi there,

Just looking for the official setup instructions to do this.  I've tried what was posted, but to no avail.  It also looks like the above admin post is missing info?

Thanks,
K

EDIT: I applied both the Destination NAT rule above (image), and the SNAT rule above to get this to work.  It is now working.  Thanks!!!

[whoiam55]

In Firewall > Port forwarding / NAT > Destination NAT
Try this:

should not it be 10443 port instead of 443 as Endian uses 10443?