Port Forwarding not working unless App Rule Services is set to "any".

Hi Issac,

You should uncheck "Rewrite source address"

I've tried it both ways and it won't work either way. Although it works enabled or disabled when "any" is selected in services.

I should also mention that I just installed this firewall which is replacing my Netgear router. The porting forwarding on the router worked perfectly when it was set as External start port 8000/Internal start port 8000... Server IP 192.168.2.110

I've tried it both ways and it won't work either way. Although it works enabled or disabled when "any" is selected in services.

I should also mention that I just installed this firewall which is replacing my Netgear router. The porting forwarding on the router worked perfectly when it was set as External start port 8000/Internal start port 8000... Server IP 192.168.2.110

So I may have just fixed it... In Hosts and Services, I changed the service to Source Port "1:65535" and left Destination Port at 8000. Can you tell me what the "1:" does?

Source ports the majority of the time will be 1:65535 when going to a service. This is how most TCPIP stack works.  :)

Hope this helps.

-Ron

Thanks Ron, I'm slowly learning... One last question, after reading all the past threads on port forwarding, I notice some say to enable Masquerading (Rewrite source address) and other say not to. Which is correct or will it matter for port forwarding?

Hi,

MASQ (Rewrite source address) is an SNAT. 

If you build a DNAT Rule and enable in this Rule SNAT, you will get a FullNAT. 

https://en.wikipedia.org/wiki/Network_address_translation

Most of the DNAT Rules should work without SNAT.