topic Re: outgoing source natting in Spark Firewall (SMB)

outgoing source natting

mcguppy — Tue, 06 Jun 2023 14:05:51 GMT

I would like to hide a local network behind a specific external IP for outgoing traffic (Source Natting, but not the Gateway external IP address).

In the GUI, I have only the possibility to switch on or of "Hide internal networks behind the Gatewway's external IP address".

Can this be done somehow with the CLI?

I am running Quantum Spark 1800 Appliance R80.20.35

Re: outgoing source natting

G_W_Albrecht — Tue, 06 Jun 2023 14:32:00 GMT

Add a manual NAT rule:

I have used 8.8.8.8 as an example here - you have to use a specific routable external IP instead to make it work !

Re: outgoing source natting

the_rock — Tue, 06 Jun 2023 14:48:23 GMT

Just do what @G_W_Albrecht said, since I assume its locally managed appliance.

Andy

Re: outgoing source natting

G_W_Albrecht — Tue, 06 Jun 2023 19:22:02 GMT

If he talks about GUI it is...

Re: outgoing source natting

mcguppy — Wed, 07 Jun 2023 06:24:39 GMT

Thank you so much for pointing me to the right direction.

Re: outgoing source natting

mcguppy — Wed, 07 Jun 2023 17:00:02 GMT

We run into a problem with this solution today. We saw in the packet capture, the outgoing traffic took the correct IP I set in the targeted source, but when the answer came back, the FW did not answer on ARP requests for this address at all and like this, I was not able to get a working connection.

In the end we created a server object with the tick set that outgoing traffic will hide behind this address as well Then it was working.