This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Allow Service to Single Server

Hi,

I have been adding Target Services to allow clients to connect to various internal servers on non-standard ports.

Rather than opening the service up entirely though, I would really rather just allow access to that particular server - i.e. open port 8443 solely for connections to an internally hosted DVR and nowhere else.

What is this best way of doing this?

Regards

Boris

This thread was automatically locked due to age.

0 vilic over 9 years ago

Create separate DNAT rule for every port/internal server combination:
Cancel
Vote Up 0 Vote Down

Cancel
0 Boris60 over 9 years ago

Hi Vilic,

Sorry, I don't think I explained it very well.

My scenario is internal and doesn't involve NAT.

If client 192.168.0.1 tries to connect to https://192.168.0.2:8443, the web proxy will throw a target service error. Adding a target service works but it opens the port up to all destinations.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 9 years ago

In Standard mode, I would recommend bypassing the proxy for devices in the same Ethernet segment. Then, you can use the firewall in the webserver to do what you want.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel