topic Re: separate services to specific interface in Spark Firewall (SMB)

separate services to specific interface

Askey_oot — Wed, 05 Nov 2025 10:01:21 GMT

Hi All,

We have an ip public range from our service provider. We want to configure separate connection on port DMZ to our specific service. I have an diagram. It's possible to configure it?

Re: separate services to specific interface

PhoneBoy — Wed, 05 Nov 2025 17:19:51 GMT

On SMB appliances, Port Forwarding is generally handled through Server objects.
It's not clear to me how traffic would be forwarded OUT the WAN interface and come back to the DMZ interface, particularly if the .189 address is on the same subnet as your DMZ interface.

Which means you have a hairpin NAT situation.
Server objects have a "Force translated traffic to return to the gateway" option to address this specific situation.
This will impact ALL traffic that hits this server object (not just internally sourced).

Re: separate services to specific interface

the_rock — Thu, 06 Nov 2025 01:00:05 GMT

Maybe you can verify with TAC to be sure, but what @PhoneBoy said all makes sense.