xg firewall home and nas or any devices on my network

Daniel,

if you are trying to access your internal servers externally, make sure your DSL modem has the proper DNAT to forward all traffic to XG WAN port, otherwise traffic is blocked on DSL modem.

If you already checked it, share the screenshot of the firewall rules you have created.

Thanks

Hi.

I cant do that because the sophos is on 192.168.2.Xx and my dsl router is on 192.168.1.Xx

It does notre accept IP on 192.168.2

Moreover, the sophos is on the dmz of my dsl router. So it should be right, no ?

make sure your DSL modem has the proper DNAT to forward all traffic to XG WAN port, otherwise traffic is blocked on DSL modem.

how do I do that if the dmz is not enough / ok ?

as you asked:

Thanks for sharing the screenshots.

Daniel, can you share the IP/Subnet for each network (wan, dmz, lan) for both DSL Modem and XG?

DMZ and WAN IP are not clear.

Thanks

hi

i do not understand what you want exactly.

Ip are written in the screenshot above.

tell me if it is not what you want:

wan : 192.168.1.18 / 255.255.255.0

ip of the gateway : 192.168.1.254 (my dsl router)

dmz : 192.168.1.18 (this ip is set on my dsl router)

lan : 192.168.2.1 /255.255.255.0

that's what you asked ?

So,

if I understand correctly, WAN and DMZ are using 192.168.1.x/24?

Thanks

yes.

you are right.

wan (on the sophos) is 192.168.1.18

the dmz is set on my router dsl.

dmz is 192.168.1.18 (the ip of the wan)

yes you're right

ip of the wan : 192.168.1.18

dmz set on my dsl router : the same ip as the wan.

Daniel,

you cannot have 2 ip in the same subnet on 2 different interfaces. This will confuse the routing table.

Make sure on your router you configure 2 different IP for WAN and DMZ interface.

Thanks

Daniel,

you cannot have 2 ip in the same subnet on 2 different interfaces. This will confuse the routing table.

Make sure on your router you configure 2 different IP for WAN and DMZ interface.

Thanks

i do not understand.

the wan is the port2 on the sophos.

the dmz is set on my dsl router.

what do you mean by "make sure on your router you configure 2 different IP for WAN and DMZ "

On my dsl router, i only configure the dmz,

what do you call "wan" ?

(in the sophos, there is 2 Ips : one for the lan (port1) and one for the wan (port2))

so in the sophos, what do I put in the wan ?

and in my dsl router, what do I put in the dmz ?

Daniel,

You router should have wan, LAN and dmz.

Each interface uses a different ip.

Can you share a small network diagram?

Thanks

what I call the router, is my dsl modem.

The router is the sophos actually.

internet =======>dsl modem ============> sophos (virtual machine) =============> lan

public IP ======> 192.168.1.254==========> port1(lan) 192.168.2.1 ==============>192.168.2.XX

                               dmz : 192.168.1.18=======>port2(wan) 192.168.1.18

is it more clear ?

thanks for trying to help me :-)

On the dsl modem:

The 192.168.1.254 is the physical IP of the dsl modem.

The 192.168.1.18 is not an interface. In the configuration of my dsl modem, i can declare a dmz. This is where i  put the 192.168.1.18.

Sorry if im not clear, but not easy in english

On the dsl modem:

The 192.168.1.254 is the physical IP of the dsl modem.

The 192.168.1.18 is not an interface. In the configuration of my dsl modem, i can declare a dmz. This is where i  put the 192.168.1.18.

Sorry if im not clear, but not easy in english

hi,

On the dsl modem:
The 192.168.1.254 is the physical IP of the dsl modem.
The 192.168.1.18 is not an interface. In the configuration of my dsl modem, i can declare a dmz. This is where i  put the 192.168.1.18.

Sorry if im not clear, but not easy in english

ps: most of the time, i received a message from the forum that says: my message is  "inappropriate" ? What does that mean ?

Daniel,

your DSL modem has different interfaces and so different IP. Assign to DMZ interface a different IP than 192.168.1.x/24 and 192.168.2.x/24, for example 192.168.3.0 and adjust the other settings needed.

Thanks

Hi Luk

i can't.

On my dsl modem, the dmz must be in the same network as the dsl modem.

let's start over :

how do you configure the sophos ?

port1 the lan : let says 192.168.2.XX

port2 the wan: let says 192.168.1.XX

                         gateway : 192.168.1.254 (ip of my dsl modem)

am I right ?

so, on my dsl modem, i must declare a dmz, wich is the wan(port2) of the sophos ?

i'm still right ?

HI Daniel ,

As per my understanding , you wish to communicate your NAS drive from the WAN (Internet) . Why was the DNAT created between 192.168.2.50 instead of 192.168.2.7 ?

Also you would need to check if the virtual host is configured the same on the DSL modem and forwarded to XG WAN interface.