Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 1100 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

yet another NAT issue...

ieatcats
ok, I recently setup astaro on my network.  Internal workstations can access external interface and the net all ok, however, I'm having trouble opening access to a webserver inside my lan.

network def.:

External - 63.x.x.x       255.255.255.248
internal - 192.168.50.0   255.255.255.0
server1  - 192.168.50.100 255.255.255.255

i enabled masq. for internal-extnic sot hat users can go online. and a packet fitler ruleto allow all services.


now i'm trying to enable access server1 from external interface.  

DNAT
extnic->http->server1->http

also enabled to allow all packets from any to access server1.  I try to connect and can't get through?  am I missing something here?  at first it seemed pretty straight forward, but now i'm confused and can't enable any connections from external->internal.  Please help.

(DNS just updated, so if anyone wants to help me witht he webadmin interface, I can mkae that available  [;)]


This thread was automatically locked due to age.
Parents
  • 0
    You can't connect clients inside the firewall to a server DNAT address on the external interface.

    If you want to access the internal web server then access it by its internal IP address, if the server is in the same network as the clients thats fine, if it is in the DMZ then add a rule to allow http from internal to DMZ.
  • 0 in reply to Biffa
    ok problem was I had my external network ip defined as a range, so DNAT didn't work this way...

    now to get netb/rpc/mail services access to internal webservers in DMZ, anyone have expierience with exchange front/back end configs and firewalling?
Reply
  • 0 in reply to Biffa
    ok problem was I had my external network ip defined as a range, so DNAT didn't work this way...

    now to get netb/rpc/mail services access to internal webservers in DMZ, anyone have expierience with exchange front/back end configs and firewalling?
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?