XG SNAT, Full NAT does not work

Hi,

if you do not use DNS to identify the server, how do users find it?

Why not just use a firewall (network) rule to allow the traffic into the server network? You don't need NAT because they re both on private networks.

Ian

When I said DNAT works, it means that WAN users are able to connect to my webserver. I just cannot browse my own website in my LAN.

I need both SNAT and DNAT or full NAT.

Do you have a rule that allows you to access the web server?

Ian

Thanks for your reply.

I have followed community.sophos.com/.../one-to-one-nat---multiple-servers

1) LAN to WAN policy with Source ip  being your server ip,Destination  will be Any. Enable rewrite source address option  and select outbound ip as your mail server public ip

2) DNAT policy for each servers.

3) Default LAN to WAN policy for internet access.

The first rule does not work for me. Both 2,3 work.

and LAN to LAN, LAN to any, any to LAN (3) firewall rules does not work.

and LAN to LAN, LAN to any, any to LAN (3) firewall rules does not work.

LAN to LAN, LAN to any, any to LAN

either 0MB traffic or disconnect from the Internet when I applied any of 3 rules above.

Where is the server located network wise, DMZ or LAN?

If it is an MS server then some of the protocols will not pass firewall rules I expect.

Ian

Thanks RfCat,

The XG firewall is non-virtual, before the router. Web Server is on LAN, Apache Linux. I use port 80 and 443.

XG is latest version. We don't have VLAN.

Any cue?

Hi,

if the server is in same segment as the users then firewall rules will not have any affect. How do the users identify the server to connect to it?

All the connections if IP only will be managed by the switch and the traffic will not reach the XG.

Ian

 does alias on https://community.sophos.com/kb/en-us/123295 use  same interface as Protected Servers on https://community.sophos.com/kb/it-it/122976