Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a problem with a host visibility which I think is caused by incomplete network configuration. There is an ADSL-router which has a DMZ subnet 192.168.0/24. In this network there is a wireless hotspot which provides internet access for visitors in its own subnet 172.24.0/24 and a firewall that serves the office LAN in its own subnet 10.35.0/24. In the LAN, there is a server which is avaialable from internet but it is not available through our wireless network.

Obviously, our firewall needs some additional routing configuration, however I am not really familiar with Astaro hardware, so I would appreciate an advice regarding how to make the server available through our wireless network. Please let me know if you need any additional info.


share|improve this question
What model routers and firewalls? How are they connected? – longneck Nov 15 '12 at 15:00
Firewall is Astaro (now Sophos) ASG120. It is the central point of the network and everything is connected to it. – Serg Nov 19 '12 at 14:31

OK Its an odd setup you have but you will need a static route on your access point pointing to the firewall DMZ IP for the LAN network and a static route on the firewall pointing to the DMZ IP of the access point for the 172.24.0/24. This should route the traffic there and back again.

You will also need rules on the firewall allowing traffic from the wifi network to the server. Also make sure the nat is correct on the firewall and AP. you will need to ensure that there is no nat performed on the traffic going to and from the wifi/lan network.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.