DNAT NTP instead of NTP Server

Question

I created this Business Application Rule to DNAT internat NTP queries to XG-> external NTP server because XG is not a NTP Server (SG yes) 
 
 But I still have at log: 
 where XG is 192.168.157.70. why?

2018-08-03 14:41:21

Appliance Access

Denied

0

Port2

192.168.158.104

192.168.157.70

123

Regards

LuCar Toni · Answer

Hi, 
 would suggest to use an internal Interface instead of external WAN Interface. 
 And delete the WAN Zone as Source. 
 Start with DNAT: 
 Source LAN. 
 Destination LAN Interface Port 123 
 Forward to WAN - NTP Server 
 
 Should work. 
 Now Clone this rule for your other rules.