This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Help with DNAT

Hello all,

I need some help with creating a proper DNAT? rule in Sophos UTM, v9.305, Home edition.

I have a IP security camera at:
192.168.1.152 (DNS, Gateway, subnet all setup inside it)
HTTP Port:10152
WAN Public IP address: 96.3.49.206

When I'm internally (LAN) hitting the following address:
http://192.168.1.152:10152  - WORKS
http://96.3.49.206:10152  - DOES NOT WORK
http://dscdvrs.com:10152  - DOES NOT WORK

When I'm away from home or on 4G LTE connection the following address:
http://96.3.49.206:10152  - WORKS
http://dscdvrs.com:10152  - WORKS

How can I get dscdvrs.com:10152 or 96.3.49.206:10152 to work when I'm inside/internally on my computer?

I'm looking to automatically send a screenshot to my phone via a link and I don't want to have to send 2 URL links in a text message, 192.168.... and 96.3.49...

I do have DNAT rules in Sophos UTM

DNAT
Traffic selector: Any → HikVision 3MP Front Door (10152) → External (WAN) (Network)
Destination translation: HikVision 3MP Front Door (192.168.1.152)
Automatic Firewall rule: X

But v9 won't let me do this on AS WELL

Traffic selector: External (WAN) (Network) → HikVision 3MP Front Door (10152) → Any
Destination translation: HikVision 3MP Front Door (192.168.1.152)
Automatic Firewall rule: X

Any help?

This thread was automatically locked due to age.

0 BAlfson over 10 years ago

Your second DNAT can't work - never use External (Network) as a traffic source in a DNAT. For your solution, try https://www.sophos.com/en-us/support/knowledgebase/115191.aspx. Cheers - Bob Sorry for any short responses. Posted from my iPhone.
Cancel
Vote Up 0 Vote Down

Cancel
0 NewImage over 10 years ago

yeah use Internet IPV4 -> HikVision 3MP Front Door (10152) → External (WAN) (Address)
Cancel
Vote Up 0 Vote Down

Cancel
0 memphis2k over 10 years ago in reply to BAlfson

Your second DNAT can't work - never use External (Network) as a traffic source in a DNAT. For your solution, try https://www.sophos.com/en-us/support/knowledgeable/115191.aspx.

Cheers - Bob

Sorry for any short responses. Posted from my iPhone.

Bob,

The link did not work. ??

Thanks for the response.
Cancel
Vote Up 0 Vote Down

Cancel
0 memphis2k over 10 years ago

Still not working. It always says connecting when I hit the address inside my network but using the WAN ip or the DDNS DSCDVRS.com.

I did have real & virtual servers entered, but I have disabled them due to trying everything to get this working.

I have IPv6 broker he.net

Any Thoughts? Merry Xmas & Happy Holidays
Cancel
Vote Up 0 Vote Down

Cancel
0 TheDrew over 10 years ago

To access internal IP via a public ip from same internal subnet you need a full nat.

please excuse any terse replies. Sent from my iPhone.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 10 years ago

I couldn't see anything wrong with the link,but I replaced it and tested it so you can try again.

Cheers - Bob

Sorry for any short responses. Posted from my iPhone.
Cancel
Vote Up 0 Vote Down

Cancel
0 memphis2k over 10 years ago in reply to BAlfson

I couldn't see anything wrong with the link,but I replaced it and tested it so you can try again.

Cheers - Bob

Sorry for any short responses. Posted from my iPhone.

Yes, the link is now working and that solved my problem! Thanks a million!
(DNS FWD'ers didn't do it, but the full NAT in the article did.)
Cancel
Vote Up 0 Vote Down

Cancel