Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 2 subscribers
  • Views 3190 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Full NAT not working on bridged Interface BR0 (Internal LAN)

ALTEMO
Hello,
I have the following problem with a installation of UTM 9.102-8

I have the internal Interface BR0 which is a bridge over eth0 and red13.
We do this because we need to forword EIB Electro Bus signals to another Building.

Now I have a Full NAT.
From: Any
Service: TCP 8010
To: WAN Adress

Destination Translation: Electro Server (192.168.153.90)
Destination Port: TCP 80

Source Translation: Internal Adress

This rule worked in 8.309 and 9.005, now with 9.102-8 it does not work anymore.

As soon as I delete the bridge, it works again.
After recreating the bridge nothing happens anymore.

I can see in the Webfilter that the NAT Rule is applied, but nothing happens.

How can I fix that?
Seems to be a problem with the UTM Software? 

Please help.


This thread was automatically locked due to age.
Parents
  • 0
    To your question.

    DNAT mode also works from outside, not when I am logged into Wireless which is the Sophos Wireless Security.

    So FULL NAT and DNAT always work from External to Internal but never from LAN inside access, as long as BR0 is active.

    If BR0 is deleted all works perfectly, but I need the bridge because of the Multicasts for the EIB Electro Bus which doesn't work over PIM-SM.
Reply
  • 0
    To your question.

    DNAT mode also works from outside, not when I am logged into Wireless which is the Sophos Wireless Security.

    So FULL NAT and DNAT always work from External to Internal but never from LAN inside access, as long as BR0 is active.

    If BR0 is deleted all works perfectly, but I need the bridge because of the Multicasts for the EIB Electro Bus which doesn't work over PIM-SM.
Children
No Data