This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Possible Bug in snat rule in 5.019

Hi
i'am trying to migrate from asl 4.022 to 5.019, all works fine but i got a problem with snat fonction. When i create rule like :

from (lan) to ( dmz) on services (any) change source to (IP) change destination to (no change).

it dosen't works at all. I have already verifying packets filter and there is no problem on it.

Any Idea ?

This thread was automatically locked due to age.

0 Chettam over 21 years ago

somebody can help me ?????
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 21 years ago in reply to Chettam

I'm not sure what the answer to your question is, but are you sure you need this?

Instead, you could have a PF rule saying INT -> DMZ (services desired), ALLOW

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Chettam over 21 years ago in reply to BarryG

I must change source IP to enter this DMZ
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 21 years ago in reply to Chettam

I don't know why.

Astaro will do static routing between lan's by default.

You DO need to add a rule like I mentioned above or it won't work.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Gert Hansen over 21 years ago in reply to BarryG

Hi there,

plz post the iptables NAT table (Packetfilter->Advanced->Current System NAT Rules) so we can see how finally got configured.

thx
Gert
Cancel
Vote Up 0 Vote Down

Cancel