DNAT doesn't work when changing the destination port

Hi Joey,

did you append :8888 to your web request?

If you did, what do you see in the firewall log?

Best Regards
DKKDG

Chrome display an error 401. IE and FireFox just return a blank page. I'm sure I'm accessing my web service over the internet, not from the internal network.

Firewall logs seems good. The request reach my web service (192.169.2.11)

Funny thing is 

when "Using Service = TCP 8888" and "And the service to = TCP 80", it doesn't work

but,

when "Using Service = TCP 80" and "And the service to = TCP 8888", it works fine

also,

when "Using Service = TCP 80" and "And the service to = TCP 80", it works fine

and

when "Using Service = TCP 8888" and "And the service to = TCP 8888", it works fine

Are there any entries in the IPS log?

Best Regards
DKKDG

The Intrusion Prevention System Log is empty

Can you really verify that the packet reach your webserver? (tcpdump)
The firewall log only show, that packet goes trough the filter.

Best Regards
DKKDG

Hi Joey and welcome to the UTM Community!

Please show a picture of the Edit of your NAT rule that changes 8888 to 80.

Cheers - Bob

I think port 8888 it is part of web protection. If so, you have to exclude it