This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNAT IPv6 outside IPv4 inside, packet dropped

Hi all,

I'm trying to reach my webserver, wich is behind a UTM 9.308.
The WAN side of the UTM is IPv6, and the LAN side is IPv4.

I've added a DNAT rule, to change the destination that reaches my UTM on port 80, to the internal network.

I've also added an Any to Any allow rule in the Firewall (for excluding the firewall from this problem). But I still get an Default Drop.

When I search on the internet, I've found some website that tells me that my DNAT rule isn't good. But I don't really see the problem, can you guys help me out?

See the attached image for the UTM settings / logs.

Thanks (again),
Bart

Network:
Host (::5) WAN UTM (::11) LAN UTM (192.168.22.1) Server (192.168.22.12)

This thread was automatically locked due to age.

Parents

0 BAlfson over 9 years ago

Do I miss something, or is the UTM not capably of IPv6 NAT to IPv4?

I believe you have proven that to be the case, Bart. [;)]

Show us a few lines of the following at the command line while you are trying to get to your server from the outside while you have the suggested Full NAT in place:
tcpdump -n -i eth0 dst 192.168.22.12

Please edit the Full NAT and attach it to your next post.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 9 years ago

Do I miss something, or is the UTM not capably of IPv6 NAT to IPv4?

I believe you have proven that to be the case, Bart. [;)]

Show us a few lines of the following at the command line while you are trying to get to your server from the outside while you have the suggested Full NAT in place:
tcpdump -n -i eth0 dst 192.168.22.12

Please edit the Full NAT and attach it to your next post.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Bart van Kampen over 9 years ago in reply to BAlfson

I believe you have proven that to be the case, Bart. [;)]

Show us a few lines of the following at the command line while you are trying to get to your server from the outside while you have the suggested Full NAT in place:
tcpdump -n -i eth0 dst 192.168.22.12

Please edit the Full NAT and attach it to your next post.

Cheers - Bob

Thanks Bob for the answer. I'll will try & post the tcpdump if I'm at home.

I'm not certain that you can do IPv4 IPv6 conversion like this. It'll work fine if you setup IPv6 internally as well and run dual-stack. I've hosted IPv6 SMTP and Web sites before in this way.

Thanks Scott, I'll ask I've they will add an IPv6 address to the webserver. The NAT rules will still be the same?
Cancel
Vote Up 0 Vote Down

Cancel

DNAT IPv6 outside IPv4 inside, packet dropped

Submitted a Tech Support Case lately from the Support Portal?