Loopback for Firewall in LAN (behind Home Router)

Question

Hi Sophos Community 
 After a lot of trial and error I'm hoping you can help me finding a solution to my scenario:

In my home setup I have my wan-interface of the sophos in a transit network. My ISP router forwards any traffic to the sophos. Now I would like to create a loopback rule to be able to access my services via my external (dynamic) IP. 
 The transit network makes this difficult as it seems. I can't get it right. Here is my NAT-Rule after my last try: 
 Do you have any idea on how to solve this? is this even possible? Best Regards

dirkkotte · Answer

Mostly accessing the external IP from ISP-Router from internal network + forwarding traffic back to firewall didnt't work. 
 my solution: create a internal DNS-Entry for the internal host ... or if you wish to use FW-WAF, DNS pointing to external FW-IP (10.255.255.253) 
 (FW-DNS entries are used before trying external DNS)

Loopback for Firewall in LAN (behind Home Router)

Top Replies