7.360 - DNAT issue with Multiple IP addresses on ETH0

Hello,

I have 3 additional addresses on the "external" interface. The first ranked DNAT works fine, the other two do not seem to work at all. I am using uplink multipath with 2 ISPs. The routing is working fine for the first address, it is a DNAT for my exchange server. The second and third DNATs are for HTTPS servers (running a custom app) and they are not translating as I have them configured.

Thanks,

Joe

0 crashtestdummy over 16 years ago

You can try disabling the auto packet filter rule checkbox for your dnats, and manually create the necessary packet filter rules. Make sure to put them at the top, with logging enabled. You'll see requests in the packet filter live log colored green, if the rule is being matched.
If no entries appear, then packets probably aren't even getting to your Astaro. If that's the case, check that the alias definition has a /32 subnet mask. It could also be an ISP issue. It's not uncommon, and if that's the case, the next router up from the astaro usually needs a reboot, or the ARP cache flushed.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 jleacu over 16 years ago in reply to crashtestdummy

As suggested, I made the changes and nothing changed. When you go to the external IP address in HTTPS it brings you to the Astaro User Portal and does not route to the DNAT I specified.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 jleacu over 16 years ago in reply to jleacu

Scratch that last post. The ARP table must have finally refreshed. It is working correctly now. Thanks for the suggestions.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel