This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM 9 - How to open certain ports to certain internal IP addresses

On the UTM, how do I allow traffic from outside to a specific inside host on a particular port, eg ssh/22 or http/80? I want to allow traffic to only a specific port(s) for only a specific internal host. I want the remote client to go to the IP address of the UTM's external interface, and then NAT to the internal address of the inside host.

Please assume I am starting with a freshly installed appliance.

I'd also like to know the "theory" of operation here, meaning for example, to accomplish this perhaps I first have to have certain NAT rule(s) defined for outside-to-inside, and then implement certain firewall rules, etc.

Thanks!

This thread was automatically locked due to age.

0 TheDrew over 12 years ago

Destination NAT (port forwarding in consumer kit) is done through "Network Security" >> "NAT" >> "DNAT/SNAT"

---

Traffic Source:
Cancel
Vote Up 0 Vote Down

Cancel
0 robertassarone over 12 years ago in reply to TheDrew

Worked perfectly! My theory of operation question is answered as well.

I did notice that no firewall rules were created. Should this be the case? It does seem like the NAT definition does have all the information required. So I guess my question is, since I defined this NAT rule and it created no associated firewall rules (I definitely had the box checked), then when is a firewall rule needed and when not?
Cancel
Vote Up 0 Vote Down

Cancel
0 scorpionking over 12 years ago in reply to robertassarone

The rules were being created. Automatic firewall rules currently do not appear in the firewall section.

This will change wih 9.1.
Cancel
Vote Up 0 Vote Down

Cancel