Sophos Firewall

Discussions forward port3 - port2 - port1

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 4 replies
Subscribers 27 subscribers
Views 2984 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

forward port3 - port2 - port1

Intern Support over 6 years ago

Hi,

i have set up a forward rule from port2 to port1 that works fine. (forwards to a webserver on the lan).

I'm now trying to make it work from port3 (zone WIFI) (where i set up my WLAN).

My forward rule look like this:

source zones: ANY

client networks: ANY

dest zone: port2:4

services: https

forward to:

internal webserver

mapped port:

443

i have a user/network rule:

source: WIFI

source network: (10.220.60.0 / 24

dest zone: WAN

dest network: ANY

services: http, https, dns, and some more

MASQ

the traffic from port3 to internal webserver will not work

whats wrong?

/BET

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 6 years ago

Hi,

if you are using a MASQ you need a port range, but for internal you shouldn't need MASQ.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Intern Support over 6 years ago in reply to rfcat_vk

The point is that traffic is supposed to go from port3 to port2 INTERNET using the public IP of the internal webserver and then port forward to the private ip of the internal webbserver (port2 to port1). The same way traffic from the internet do.

Using PUBLIC DNS-records

/BET
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 6 years ago in reply to Intern Support

The problem is you are using the same external address for your internet access as the server access. You will need to workout how to create loopback for that server in XG or get a different IP address for your server.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Intern Support over 6 years ago in reply to rfcat_vk

Hi,

i am using xxx.xxx.xxx.190 for internet and xxx.xxx.xxx.143 for the port forward

/BET
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Intern Support over 6 years ago in reply to rfcat_vk

Hi,

i am using xxx.xxx.xxx.190 for internet and xxx.xxx.xxx.143 for the port forward

/BET
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data