This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

access public IP from internal network.

I hare read all the posts on this subject, and none of them have any good answers.

How do you access services via your public addresses from your internal network.  Most of the answers require you to modify your SNAT/DNAT rules.  But that causes all of your logs to come from your public address (unacceptable).

I have an FTP server using FTP/SSL which requires the public address to work (other wise it sends the private address).  If I update the server with the public address in the FTP Software, the suers from the outside can get in, but I cannot from the inside.

Please advice.  Thanks in advance.
Chad

This thread was automatically locked due to age.

Parents

0 VelvetFog over 21 years ago

If your Internet provider allows you to use more than one IP address, then a good workaround is to use one public address for presenting your DMZ based server, and the other public address to masquerade your Internal network where the workstations are. Then you will be able to access the servers from the workstations using their public IP address or domain name.

For more info, read my memos in this thread:

https://community.sophos.com/products/unified-threat-management/astaroorg/f/51/t/21576
Cancel
Vote Up 0 Vote Down

Cancel
0 AJo over 21 years ago in reply to VelvetFog

Is it really necessary to have two public ips? Should'nt just separting the servers (dmz) and the clients (internal) be enough? using DNAT and SNAT for the servers and MASQ for the clients?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 AJo over 21 years ago in reply to VelvetFog

Is it really necessary to have two public ips? Should'nt just separting the servers (dmz) and the clients (internal) be enough? using DNAT and SNAT for the servers and MASQ for the clients?
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data