You have the correct SNAT rule now using Scott's suggestion.
One fundamental rule is that SNAT is the last thing that happens before a packet leaves an interface. A key rule for inbound traffic is: a DNAT handles traffic before it's seen by a proxy and a proxy handles traffic before the traffic can be considered by manual routes and packet filter rules.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
You have the correct SNAT rule now using Scott's suggestion.
One fundamental rule is that SNAT is the last thing that happens before a packet leaves an interface. A key rule for inbound traffic is: a DNAT handles traffic before it's seen by a proxy and a proxy handles traffic before the traffic can be considered by manual routes and packet filter rules.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
