Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 922 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

An help with Port Translation in NAT

eclipse79oldacct
Hello,
I am not familiar with Astaro products, I'm using a demo unit in order to evaluate it. My previous firewall had a feature called Port Translation that I used for security reason in order to not expose official syslog ports to external accesses. This is what I would like to achieve:

All the packets from internet and directed to x port (x is a non standard syslog port, i.e. 1234) should be forwarded towards 514 port of 192.168.1.2 ip.

How can I obtain this?

Thank you! [:)]


This thread was automatically locked due to age.
Parents
  • 0
    eclipse79 likely has found the necessary info, but for others with the same question...

    'Network Security >> NAT' 'DNAT/SNAT' tab

    Traffic Source: Any
    Traffic Service: [1234 Service]
    Traffic Destination: External (Address)

    NAT mode: DNAT (Destination) 

    Destination: 192.168.1.2
    Destination Service: Syslog

    Automatic packet filter rule: [checked unless you want to create a more-restrictive rule]


    The biggest mistake people make normally is failing to indicate "External (Address)" for the 'Traffic Destination' in the traffic selector portion of the definition.  The second most-popular error is repeating the service in 'Destination Service' - leave that blank if you aren't changing the service as we did in this example.

    Cheers - Bob
Reply
  • 0
    eclipse79 likely has found the necessary info, but for others with the same question...

    'Network Security >> NAT' 'DNAT/SNAT' tab

    Traffic Source: Any
    Traffic Service: [1234 Service]
    Traffic Destination: External (Address)

    NAT mode: DNAT (Destination) 

    Destination: 192.168.1.2
    Destination Service: Syslog

    Automatic packet filter rule: [checked unless you want to create a more-restrictive rule]


    The biggest mistake people make normally is failing to indicate "External (Address)" for the 'Traffic Destination' in the traffic selector portion of the definition.  The second most-popular error is repeating the service in 'Destination Service' - leave that blank if you aren't changing the service as we did in this example.

    Cheers - Bob
Children
No Data