This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Port forwarding tribulations

Hello

I'm running the latest Sophos UTM on windows 2012 server hyper v

dsl modem (dynamic ip address that never changes)---ect1---sophos utm vm---eth0(192.168.1.1) lan---Cisco SG 300

install went well, internet works on all vms, performance is fine
yet on 192.168.13 im running IIS with one website , ISP doesn't block any ports
i used the settings people recommend here on the boards, when i use a port checker : 80 seams to be open but closed when i check it on 192.168.1.13

did i miss something ? im rather a newb here

my settings:

This thread was automatically locked due to age.

0 BAlfson over 10 years ago

Hi, Dav, and welcome to the User BB!

Rather than "Any" in the DNAT source, use "Internet." Make sure that the "webserver" definition conforms to #3 in Rulz.

Cheer - Bob
PS I used a sandbox to look at your external links. External links can become infected with malware, so please [Edit] your post above, click on [Go Advanced], attach your pictures to the post and delete your external links.
Cancel
Vote Up 0 Vote Down

Cancel
0 Dav over 10 years ago in reply to BAlfson

thank you

I realised what the problem is: "accessing the external address of an internal server from the internal network does not work correctly."

Can see my website, just not while on my own network[:D]

UTM: Accessing Internal or DMZ servers from Internal Networks using DNAT
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 10 years ago

Common issue. If we'd have known that you were trying to browse to the external interface from internal, could have gotten you the answer quickly. The devil is in the details. [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 ChrisTwigg over 10 years ago

If you'd like to view external Dnat internally you can use the addition of a Full NAT rule.

I always place the rule above the DNat Rule.
- image.jpg
- View
- Hide
Cancel
Vote Up 0 Vote Down

Cancel
0 Dav over 10 years ago in reply to ChrisTwigg

That did the trick, thanks [:)]
Cancel
Vote Up 0 Vote Down

Cancel