topic Re: Port forwarding in General Topics

Port forwarding

Andy_N — Thu, 01 Mar 2018 09:48:43 GMT

Hi, everyone

I’ve got HA ClusterXL with 3 VIP interfaces (1 WAN and 2 LAN) (see attached pic1).

When I do port forwarding for LAN – its works fine (smtp).

But for VIP DMZ – it doesn’t works (ftp)

In logging everything – OK – rule is working, but in the NAT section (pic 2) destination – wrong server (cloud). The cloud – has own rule for publishing (smtp).

We have only one public IP.

What should I do to make port forwarding working correctly?

Thanks

Re: Port forwarding

Andy_N — Thu, 01 Mar 2018 11:29:19 GMT

I did it myself.

Manual NAT - no more

Re: Port forwarding

HeikoAnkenbrand — Thu, 01 Mar 2018 12:59:29 GMT

I don't quite understand the problem.

- Can you see an arp entry for the VIP?

- Create a manual NAT rule!

- Add a proxy arp address if necessary!

What does a fw monitor show?

# fwaccl off

# fw monitor -e "accept(src=<host> or dst=<host>);"

Regards

Heiko

Re: Port forwarding

Andy_N — Mon, 05 Mar 2018 05:21:10 GMT

Thanks for reply, Heiko

I did manual NAT rules.

Everything is working well.

Thanks.