My father has just moved from a FTTC ADSL (BT) provided service, using an openreach modem connected via ethernet to a Sophos UTM device, to something quite new an exciting...
in his village there is a local school with a 10G fibre connection, and a radio link to a church steeple relay. each client then has a 100Mbit symmetric radio link at their property pointing at the church steeple. This dish connects directly to the router like the openreach modem did (or at least this is what I've done), and we can access the internet.
In the old setup, the external interface in Sophos UTM would receive an IP address which was the public IP address. The same IP address that everyone else on the internet would see my dads activity as coming from.
in the new setup, the external interface reports a private IP address and gateway. The IP address that everyone else on the internet would now my dads activity as coming from is completely different.
This at least means that all the rules for VPN's, webservices, etc that used to be accessible from outside no longer work, because the 'External (address)' definition is the private IP address
I also wonder what else this means for MASQ?
I considered that the external interface was not configured correctly, but there didn't seem to be another connection mode that would work any better. Noting that he can browse the internet surprisingly fine, and really fast! impressive and rural.
does this mean I'm double NAT'ed? Or something else? Any ideas?
my googling mostly gave me results with users with multiple public ip's or double nats via two routers etc. none of which i thought applied to this.
Thanks,
This thread was automatically locked due to age.
