DNAT From External to Internal Device:(port number) through Router Dyndns

Hi Kuo Zhi Hang,

Thank you for reaching out to the Community! 

Could you please share the screenshot of the service definitions? 

Did you run a packet capture on the destination server IP address and the source and mapped ports on the firewall? If not, please run the packet capture to identify if the traffic reaches the firewall or not. Check if the traffic is forwarded to the internal server or it is dropped. 

• Sophos XG Firewall: How to monitor traffic using packet capture utility in the GUI

Thanks,

Hi, thanks for reply.

Refer below for services screenshot:

I try to capture the packet but it shows nothing.

Filter BPF string by : hots 192.168.1.40
port 8088
port 4040

Hi Kuo Zhi Hang,

Thank you for the screenshot! The service definition seems correct. 

If there is no traffic to the destination host, the connection request is not forwarded to the firewall. Please check if the connection request is dropped before it reaches the firewall on your upstream devices.

Thanks,

Hi Kuo Zhi Hang,

Thank you for the screenshot! The service definition seems correct. 

If there is no traffic to the destination host, the connection request is not forwarded to the firewall. Please check if the connection request is dropped before it reaches the firewall on your upstream devices.

Thanks,

Problem Solved!

Since already DMZ to Sophos, i just remove the port forwarding from the router and everything works as planned. Thanks!