NAT Loopback (Hairpin NAT) to Access My Public Domains From Internal Zones (LAN) [Sophos UTM]

Hello Community,


I am out of solutions here and want your help,

I have Many web servers on the LAN, each has DNAT (Static IP)

I have many static IPs, all on one interface (PortB:0, PortB:1, PortB:2, ...) each subinterface has a static IP

I use Cloudflare to Manage DNS for my domains

• when Cloudflare proxy switch is on(Hiding my real Static IP):
  • The domain sub.example.com to resolve to one of Cloudflare IPs and
  • I can access my domains (sub.example.com) from both Outside the network and from the webserver itself
• when Cloudflare Proxy switch is off:
  • the domains will resolve to my Static IP (which is on PortB:0, PortB:1, ...)
  • I can access my domains from outside only because I have a DNAT rule But I Can't access them from inside the Server

I need to access my webservers regardless the status of the proxy in Cloudflare,

I tried several Rules I read about none of them worked,

I also contacted Sophos Support and they made a session but didn't solve it and said that they will revert back

I urgently need this to work


Appreciate your Kind Support