topic Re: Static nat external traffic to internal server in Firewall and Security Management

Static nat external traffic to internal server

Emomorfarn — Tue, 19 Jul 2022 12:14:36 GMT

Hi,

I have a lab enviroment at home cause im trying to learn checkpoint. And im stuck at trying to NAT external inbound traffic to my internal host.

I've tried manual static NAT rules & Automatic static NAT with my external IP as a object and put my internal web server as the IP to translate too. I can see in my logs that the traffic hits my external IP and gets allowed on the ports which i have allowed but i dont see any hits whatsoever on my NAT rule.

What am i doing wrong?

Re: Static nat external traffic to internal server

Sorin_Gogean — Tue, 19 Jul 2022 14:04:35 GMT

hey,

I had no problem setting a NAT so traffic to certain Public IP would end up to an Internal machine .

And all traffic from that Internal machine would be HIDE under the Public IP .

The Public IP is not the same public IP of the firewall !!!!!

Thank you,

Re: Static nat external traffic to internal server

Emomorfarn — Tue, 19 Jul 2022 14:09:58 GMT

Im not sure that im following your Sorin, im talking about external to internal 1-1 NAT.

"The Public IP is not the same public IP of the firewall !!!!!" - Can you explain this further?

Re: Static nat external traffic to internal server

PhoneBoy — Tue, 19 Jul 2022 14:41:58 GMT

You should create the object in terms of the internal IP (where a host has that IP) and specify the external IP you want it to appear as.
This is how the automatic NAT rules work.