try to open port to CCTV

Question

Hello guys, 
 
 Im struggling on this case: 
 
 I want to open port ( 37777/tcp ) to get acess CCTV from exterior like a phone, tablet or computer. This acess is from Public IP ( WAN ) so i create the service ( print1 )

After that i create firewall rule i already tried too create a DNAT but the port is always closed... (print2)

I dont have any router before firewall to block this port .. 
 What i can do? 
 
 Thanks

Wayne Folta · Accepted Answer

Assuming you're using IPv4, you need to set up a NAT rule. Under IPv4, all devices behind your firewall appear to have your firewall's IP address. So you set up a DNAT rule that takes some port that your firewall is not already using -- in your case 37777 is free -- and DNAT it to go to your camera. 
 You then have to allow, via firewall rule, access from the WAN to the LAN/VLAN on which your camera sits, narrowing the access to your camera (it's internal, actual IP) and port. NAT happens before the firewall rules so the firewall rules don't even know NAT occurred. 
 Two steps.

try to open port to CCTV

Top Replies