Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 39 subscribers
  • Views 11199 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WAN -> LAN Keeping Firewall IP

ArnaudCouturier

Hello,

I'm a new user so maybe I doing something wrong but actually all my rules work, the only thing is after nat packet to the application the sourceIP the application see is wrong because it show the local ip for the firewall.

USER(91.10.10.10) -> INTERNET -> FIREWALL(10.10.1.30) -> NAT MASQUARADE -> 10.10.1.5 (I see 10.10.1.30 from here)

My Policy configuration is:

Source Host: Any

Hosted Server: WAN

Hosted Address: Port2(Public IP)

Protected Application:

- Zone: LAN

- 10.10.1.5

Port Forwarding:

- Protocol TCP

- Single Port

Routing:

 - Rewrite Source Address: ON

- Use outbound Address: MASQ

Intrusion Prevention OFF

Trafic Shaping OFF

Reflexive Rule OFF

Thank you so much if someone can help me !



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to MarcoScholl

    Thank you for your replies, it's not a webserver, my webserver rule work like a charm with Pass Host Header and X-Forwarding-For

    I just want to redirect paquets that hit my firewall on X port to another lan address and port but keep the source IP to identify my users, if i disable Rewrite Source Address the rule stop working, this i why I turn on that.

Unfiltered HTML