This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNAT not working, packet status: Violation Local_ACL

Hi, I've made a DNAT to forward some ports to a server behind the Sophos XG, but it doesn't seem to be working, and I can't seem to understand why.

I'm a bit new at this, so I have no clue what could cause this, so I was hoping with some help understanding what causes this.

Some info:

The network is composed by my ISP router (192.168.1.1) forwarding ports to the Sophos machine (192.168.1.254) and the rest of the network is behind it (10.*). I've already tested the port forwarding on the ISP router and works fine.

The Rule (I've also tried with MASQ off)


 

Line from Packet Capture:

And this is a sample packet information I've captured of a packet that got blocked:

Ethernet Header
Source MAC Address:64:59:f8:49:af:50
Destination MAC Address: 00:0c:29:1a:03:89
Ethernet Type IPv4 (0x800)
 
IPv4 Header
Source IP Address:173.236.246.209
Destination IP Address:192.168.1.254
Protocol: TCP
Header:20 Bytes
Type of Service: 0
Total Length: 52 Bytes
Identification:39834
Fragment Offset:16384
Time to Live: 49
Checksum: 18117
 
TCP Header:
Source Port: 36742
Destination Port: 25565
Flags: SYN
Sequence Number: 1577553627
Acknowledgement Number: 0
Window: 29200
Checksum: 46429

 



This thread was automatically locked due to age.
Parents Reply Children
No Data