Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Our Internet line is configured as follows (IP addresses are simplified placeholders, but it's the same layout):

Default gateway:
Public interface IP:
SMTP:       (translates to
Email web interface: (translates to
VPN device: (translates to
My computer:

Notice that the main public IP is NATted to several services on a server on the back-end, and that different devices utilize the same port for different services.

My problem is this: I'm having trouble with NAT reflection (accessing a device on my LAN from its public interface). From what I understand, I need to translate my computer's IP to the public IP, so the router will properly un-NAT my packets and send them back to me. However, I've tried just about every combination of NAT rules I can think of and it still doesn't work for me. We did move to a new location recently, and one of the only things changed in our Sonicwall was the settings for our WAN interface. Are there any problems with the configuration above that are interfering with my attempt to configure NAT reflection?

share|improve this question

Your search term is "NAT hairpin". I don't use SonicWall, but I found this video which seems to describe how to do it:

share|improve this answer
It's behind a paywall :\ – Bigbio2002 Feb 6 '12 at 22:39
Ah, crap. Sorry. I was just doing the "NAT hairpin Sonicwall" search and came across that. – cjc Feb 6 '12 at 22:40
He's right though. You'll want to add a NAT rule that translates the source from "Firewalled Subnets" to "WAN IP". – Jim G. Feb 9 '12 at 22:14
up vote 0 down vote accepted

It turns out I had NAT loopback configured correctly, but there was a bug in SonicWALL's implementation of 802.1p QoS that was causing loopback traffic to be dropped. There was nothing wrong with the IP configuration.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.