Pass public IP address to LAN device

Question

Hi experts, 
 I am new to this so please bear with me! 
 I have Sophos XG115 (SFOS 19.0.0 GA-Build317). I have set-up a standard firewall rule and policy that forwards any public request for my domain name (i.e. abc.com) to my back-end web server on the LAN. This is all working just fine! 
 I am collecting logs from the LAN web server but all logs tell me the public requesting IP address is 172.16.16.16 (the LAN IP address of the Sophos firewall). Is there any way of passing through the originating WAN IP address of the requestor to the LAN web server? 
 Many thanks in advance. 
 Danny

Farshid · Answer

Hi Danny, 
 If you have invalid IP address on your web server like 172.16.16.X then you are probably using DNAT rule along FW rule. From Rules and Policies > NAT Rule, Find DNAT rule for your webserver. In configuration of that rule, change translated source from MASQ to Original. If you have problem in finding NAT rule, You can use packet capture.

Danny Webb · Answer

Hi Farshid, 
 You are a genius. Thank you. 
 I found no existing SNAT or DNAT rules so I created a new DNAT rule for HTTPS from WAN to Web Server LAN IP and made sure the translated source was left to original as suggested. 
 I can now see the originating public IP Address in my logs on the LAN web server. 
 My sincerest thanks again Farshid 
 Danny

Pass public IP address to LAN device

Top Replies

Submitted a Tech Support Case lately from the Support Portal?