I have a network 192.168.1.0/24 with one server 192.168.1.1/24, NAT/Masq rules are as this:
LAN_Masq LAN -> All / All MASQ__eth1 SrvNAT Any -> Srv_WAN / Any None Srv_LAN where eth1 is my WAN interface, LAN is 192.168.1.0/24, Srv_WAN is for ex. 23.23.23.23 and Srv_LAN is 192.168.1.1
From LAN, I can access Srv using 192.168.1.1 but not using 23.23.23.23.
What route or NAT rule must I add to allow access 23.23.23.23 from my LAN ?
Thanks in advance
[size="1"][ 03 October 2002, 12:38: Message edited by: Antoine Duchateau ][/size]
for your problem ther is only one solution, called D-NAT. You have to establish one rule for each service you want to enable form the outside to the Server inside.
Here is an example for an Webserver behind th ASL:
Filter Rule: ANY -> HTTP ->
NAT Name: Type: DNAT/SNAT
Packets to match ANY -> -> HTTP
Change Destination to Adress: Service Destination: HTTP (80)
This is not too difficult - just add an internal DNS server to your network - specify the internal ip address of your machines in there and let your clients look at this server as your primary DNS. You can also set this server up to forward other requests to your firewall if the firewall DNS proxy is enabled. Good luck