Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 4 subscribers
  • Views 9549 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM NEWBIE Masquerade + NAT

schnub

Hallo Leute,

habe ein hoffentlich einfaches Problem.

 

Und zwar hab ich einen kleinen "server / proggy" auf den ich von außen per NAT Port weiterleitung zugreifen kann. Soweit so gut. Die Weiterleitung funktioniert prima.

 

Jedoch bekomme ich beim Server immer die INT Interface IP von der Sophos angezeigt und nicht die externe (Internet) IP des Clients der Verbindet. Die Firewall Regel wird für die NAT Freigabe wird als erstes abgearbeitet.

 

Ein Bild von den Maskierungs Regeln hab ich angehängt. Bringen diese ANY --> Interface Maskierungsregeln überhaupt was?

 

 

 



This thread was automatically locked due to age.
Parents
  • 0

    I think you just need to delete the second rule in your screenshot. For outside access to an inside host you need a DNAT rule, not masquerading. Simply create a DNAT rule for traffic going to External WAN (address) on the desired port(s) DNAT to your internal server.

    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

  • 0 in reply to apijnappels

    This is what the DNAT rule looks like, but still only UTM Gateway Address on the Gigablue Quad.

  • 0 in reply to schnub

    Did you also delete the masquerading rule from External WAN (Address) to Internal?

    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Reply
  • 0 in reply to schnub

    Did you also delete the masquerading rule from External WAN (Address) to Internal?

    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Children
Unfiltered HTML