Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 2 subscribers
  • Views 1601 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

help me DNAT webserver

dungnt
Hi all
I running ASG V6
I want create webserver
Network Definitions:
Webserver:10.40.97.99 
Services: 
web_serviceTCP/UDPsource port: 1:65535Destination port:80
DNAT
Packets to match:
Source address: Any
Destination address: webserver
Service: web_service

Change Source to:
Address: No change

Change Destination to:
Address: Webserver
Service destination: No change

Packet Filter Rules:
source: Any
service: web_service
Destination: webserver

I'm using dyndns.org
I can access my webserver, Help me


This thread was automatically locked due to age.
  • 0
    DNAT
    Destination address: webserver

    can't work - the access to the webserver is what u like to set up!
    external clients cannot direkt access - so they access (mostly) the external interface, that's the destination - then it will be changed to the webserver, that's ok...

    rgds,a.
  • 0 in reply to AMros
    DNAT
    Destination address: webserver

    can't work - the access to the webserver is what u like to set up!
    external clients cannot direkt access - so they access (mostly) the external interface, that's the destination - then it will be changed to the webserver, that's ok...

    rgds,a.

    Thank AMros
    I changed destination address: external
    but it can't work.
    do any else ?
  • 0 in reply to dungnt
    Source address is the external network interface.
    Destination address is the internal address of your webserver.
  • 0 in reply to Turbo
    sorry turbo, that's for the pfr, not for the DNAT:
    packets comin' from any - directed to the external ADDRESS (dungnt: NOT network!) with service http - than they will be redirected to dest webserver w/o service change;
    with auto-pfr or pfr like prescribed this have to work!
    webserver have astaro as gtw or corresponding route?
    nat for internal in place?
    webserver not restricted to accept traffic only from special sources or listen to special ip's?

    rgds, a.