-2
votes
1answer
25 views

EdgeRouter Lite NAT to wireless routers [on hold]

i want to connect 2 wireless routers to EdgeRouter-Lite, but im kinda new at this and lost. I know I have to do NAT and the wireless router's ip should be 88.119.128.224 88.119.128.228 (they are ...
0
votes
1answer
53 views

Can't establish a reliable VPN tunnel (ShrewSoft client / ZyWALL USG-50 firewall)

I try to setup an IPSec VPN tunnel through my firewall (ZyWall USG-50), but it doesn't work like it should. quick scheme of my installation: ME [A.B.C.D] --- **INTERNET** | ...
0
votes
0answers
54 views

Port Forwarding to a VPN Client

I'm looking for some help getting a port forward setup to a VM running Ubuntu 12.04 on my LAN. I can forward the port to the VM successfully and connect to the service over the Internet. But when I ...
0
votes
0answers
153 views

[SOLVED ]Openvpn routing for lan to lan through tun

I am trying to setup an OpenVPN tun to connect two lan's The open vpn connection is up and working but there is a problem with my routing or nat or something. What I need is an example of what a ...
1
vote
1answer
39 views

Websever behind Sonicwall, Gateway Timeout

I am stuck here, I have a Cradlepoint CBA750B in IP-passthrough mode connected to x1 on my Sonicwall NSA220. Behind the Sonicwall I have a webserver on the LAN. I have X1 set to use DHCP to get the ...
1
vote
0answers
51 views

Firewall and NAT settings in GSM modem for one server

I have a GSM Modem (PSI-MODEM-GSM/ETH) in field with one device behind, acting as a server. The situation is as follows: "PC" | \_________Dynamic IP: 10.103.153.122 | ...
1
vote
2answers
55 views

Communicating between two servers sitting behind their respective NATs

I'm building an web app (Server A) that communicates with a remote server (Server B) that is connected to the internet. Server B resides behind a NAT and is listening to communication on 3 ...
-1
votes
1answer
67 views

How do I know that my TCP connection is safe from the Firewalls/NAT?

Being on the Azure cloud, I found that the firewalls there drop connections between the Web server and the database quite often. Mostly when there was some inactivity, I think something between 5 and ...
0
votes
1answer
94 views

Configure atftp server to reply on port 69

Problem : I'm facing to a problem with TFTP server and Cisco 79XX IP phones. When on a local network, everything is working fine, but when the TFTP server is on a public server (and phones inside a ...
0
votes
1answer
29 views

Can't see Webserver from LAN - NAT Issue?

I just got a ZyXEL USG50 and it's more complex than I'm used to. Traffic from WAN is going to my websever as desired thanks to a firewall and NAT rule. The problem is, when trying to request a ...
0
votes
1answer
198 views

Apache2 server (behind Zyxel USG 100 NAT/Firewall) with vhost does not log real clients ip addresses

SOLVED To allow the Zyxel USG 100's NAT to forward untouched packets to my web server i edited the policy route of the Zyxel. Zyxel -> Configuration -> Network ->Routing -> Policy Route ...
0
votes
1answer
102 views

iptables alternative for nat in windows

When setting up a comms server I usually use iptables in linux to forward any incoming connections on a particular port to another server, e.g. Chain PREROUTING (policy ACCEPT) target prot opt ...
2
votes
2answers
78 views

IPtables NAT puzzler: Why is traffic from the firewall host being NATed even though it's not coming from one of the prescribed source addresses?

I run a small network where a linux web/mail server also provides NAT for a collection of windows boxes. One of these windows machines is apparently misbehaving (ZeroAccess botnet even though I can't ...
0
votes
2answers
214 views

Cisco ASA/PIX Can't Access Internal Resources Behind NAT [duplicate]

My servers are natted 1:1 as follows, i.i.i.i maps to x.x.x.x where i is an internal IP, and x is the external IP. From an i.i.i.i machine, I cannot access x.x.x.x resources... What special ...
1
vote
0answers
30 views

Zyxell USG200 NAT for local computer using wan address

My WAN public address is linked to the server with NAT. How can I set up the firewall to let all local computer use the same NAT rules for www.mypublicaddress.com address from INSIDE the network? I ...
0
votes
1answer
108 views

Understand FTP; Active/Passive with Firewalls and NAT [closed]

I have some basic questions about FTP with firewalls and NAT, I hope someone could help me :) I split them up in different scenarios: Active FTP without NAT Setup: Server 1.2.3.4, Default ports; ...
0
votes
1answer
693 views

iptables forward rule not working in openwrt

I am trying to apply some iptables forwarding rules in openwrt. Here is my scenario - My server has two cards ath0 and br-lan. br-lan is connected to internet and ath0 to private network. The other ...
0
votes
1answer
133 views

ADSL Router - Access External IP internally

I have a problem when I'm doing an access using my DNS hosted at another server, which performs a redirect to my internal network. example: User attempting access to internal DNS: intranet.site.com: ...
2
votes
2answers
1k views

FTP - 500 I won't open a connection to xx.xx.xx.xx

I'm running a server on AWS and I'm connecting out to a partner's FTP site (not much idea what they are running). My server has an elastic IP. In the results below xx.xx.xx.xx is the internal IP ...
0
votes
1answer
234 views

Asterisk behind a firewall

we have a bit a sticky problem on our Asterisk server, which we are struggling to resolve, I'm hoping someone with more knowledge than me can help. We are running Asterisk 1.8.23.0 on Centos 6.4 and ...
3
votes
1answer
385 views

Symmetric NAT and UDP Hole Punching

I've read this question, but the explanation of Symmetric NAT wasn't detailed enough. Please could someone help me to understand the following paragraphs? I read this about Symmetric NAT: Each ...
0
votes
0answers
80 views

Routing static IPs

This is probably a simple question for you experts. I have a BT infinity business broadband account, that offers 5 static IP addresses. I'm trying to expose a server on one of those addresses. This ...
0
votes
1answer
87 views

Get IP of the “requestor” when doing iptables NAT

I am doing NAT traffic forwarding using iptables (1.1.1.1 => 2.2.2.2) with the following commands: iptables -t nat -A PREROUTING -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2 iptables -t nat -A ...
3
votes
2answers
2k views

How do I forward/NAT all traffic to one interface/IP to a remote IP?

I have one "server A" that has multiple IPs attached to it, like so: eth0:0 1.1.1.1 eth0:1 1.1.1.2 eth0:2 1.1.1.3 I have another "server B" that also has multiple IPs attached to it, like so: ...
9
votes
3answers
2k views

Exposing multiple servers behind NAT using a single public IP address

This is a Canonical Question about NAT and DNS I'm currently trying to set up a network with a DMZ containing a web server and an e-mail server separated from the Internet by a network address ...
2
votes
2answers
62 views

Cisco Network Object NAT to get Internet?

So I've inherited a Cisco ASA 5505, and I have no experience whatsoever with the things! There are two Network Interfaces both WAN facing, and the LAN interface of course. Now in NAT rules, there are ...
0
votes
1answer
138 views

How to redirect a packet to localhost in pf?

I am trying to redirect packets that are going to internal network to localhost of firewall. I wrote this rule but it doesn't work. int_net = "{10.0.0.0/24}" ext_if = "{igb0}" int_if = "{igb1}" rdr ...
1
vote
0answers
344 views

Puppet agent (v3.0.1) hangs connecting to master (v3.1.1) in VM behind firewall (with NAT based access) - SOLVED

I am using puppet agent v3.0.1 (On FreeBSD), trying to connect to a puppet master v3.1.1 (On Ubuntu) and the puppet agent hangs with the following debug output: puppet agent --debug --no-daemonize ...
0
votes
1answer
371 views

NAT / Port Forwarding with iptables firewall [duplicate]

I've got the following setup: firewall (iptables) eth0 internal interface, 192.168.2.10 ppp0 external interface, public_ip (IP masquerading) server1 (192.168.2.11), service 1 (port 443) server2 ...
1
vote
1answer
156 views

Checkpoint - Wifi Bridge mode kills round trip requests?

I'm fairly sure this is either a NAT or routing question, but it's one that continually has me stumped. The hardware is a Checkpoint Safe@Office firewall. The default mode of operation is that wired ...
3
votes
1answer
576 views

Dual Cisco Router Stateful Firewall

At my company we have a single Cisco 3925sec/k9 router running BGP with 2 ISPs. Now we want to purchase a redundant router of the same model to eliminate a single point of failure. I can set up BGP ...
0
votes
1answer
87 views

NAT/PAT port and address selection

I am currently having some issues with TCP port reused too often (under 2 minutes) for a source NAT and I was wandering what is the algorithm used to select the IP and port for a SNAT. Here is some ...
0
votes
1answer
525 views

IPTABLES nat maintaining source IP address with CSF

We have been using CSF on a virtualized (OpenVZ) environment successfully for a while combining venet and bridged interfaces so we can use public IPs + local addressed virtual systems. Kernel IP ...
1
vote
2answers
2k views

iptables NAT/Forwarding with external ADSL router; PCs on the network can't access the internet

I'm setting up a firewall/gateway (Ubuntu server 8.04.1) The firewall has three NIC's: eth0 192.168.0.2 eth1 192.168.1.2 eth2 192.168.2.2 eth1 is connected directly to the ADSL router (which also ...
1
vote
2answers
446 views

Can a global IPv6 address be NAT'd to an internal IPv4 address at a firewall-level?

As an organisation we've just requested our first IPv6 allocation. At present we are a wholly IPv4 organisation with a global IPv4 address allocation configured on our edge router and used ...
1
vote
1answer
422 views

pfsense firewall filter rules behind nat?

i am new in pfsense i have vmware which pfsense and windows xp are installed on them pfsense in using ip 192.168.44.1 for LAN and 192.168.121.129 for wan (which is NAT) my win xp ip is 192.168.44.2 ...
1
vote
1answer
77 views

NAT ports - how do they work?

I have the following network schema: Computer A: three nics: NIC 1 (eth0): dhcp, public internet NIC 2 (eth1): static 192.168.1.1, gateway for Computer B NIC 3 (eth2): static 192.168.2.1, gateway ...
0
votes
3answers
714 views

Using a nat rule to translate 80/443 traffic to web server, but internal users cannot access it using external ip/domain name

I am using Cisco ASDM for ASA I have my internal network called soa. My outside interface is called outside. Let's say my outside IP given to me by my ISP isp is y.y.y.y I have a web server inside ...
2
votes
2answers
128 views

NAT, iptables and problematic ports

I am building a small office network with virtual machines. My schema is this: Computer A: gateway, ip 1.1.1.1, iptables used for NAT [eth0=public internet dhcp, dhcp; eth1=gateway] Computer B: ...
0
votes
2answers
177 views

Do I need to enable firewall before Natting? [closed]

I want to make my local server visible over the internet. I've learnt that I'll be able to achieve this through NAT. I'm using a D-Link router, DIR-600. In the application rules it asks me for ...
0
votes
1answer
831 views

Juniper SSG20 IP settings for email server

We have 5 usable external static IP addresses leased by our ISP: .49 to .53, where .49 is assigned to the Juniper SSG20 firewall and NATed for 172.16.10.0/24 .50 is assigned to a windows box for ...
1
vote
0answers
234 views

iptables dynamic NAT, SNAT: force overload on exhaustion

Is there a way to specify the use of iptables NAT'ing where you can use SNAT for a pool of outside addresses, but when the last IP is about to be used it is used as an overloaded outside IP? I ...
-1
votes
1answer
122 views

Multiple External IP's

I have a Virtual host server that has 6 VM's on it running a Windows SErver 200i8 r2 enviroment. I have two domains externally one of which points to my static IP. How do i use my other static IP's ...
3
votes
1answer
2k views

pfSense router on a LAN with two gateways

I have a LAN with an ADSL modem/router on it. We have just gained an alternative high-speed internet connection at our location, and I want to connect the LAN to it, eventually dropping the ADSL. ...
1
vote
2answers
371 views

NAT translation with Cisco ASA 5505

I am trying to setup NAT translation on a ASA 5505, however the new public IP address never actually becomes available after adding it. I'm sure I'm doing something stupid, but so far the problem has ...
1
vote
1answer
241 views

Configuring a PIX to allow SMTP between DMZ and internal network

I have a Web Server (193.170.4.2) in my DMZ that needs to communicate with the our Exchange Server (10.77.51.87) internally via SMTP. I used access-list acl-dmz permit tcp host 193.170.4.2 host ...
4
votes
2answers
2k views

Secure NAT setup with iptables

I have a Debian running device that needs to act as an internet-gateway. On top of that I want to provide a firewall that not only blocks inbound traffic, but also outbound traffic. And I figured ...
0
votes
1answer
115 views

Looking for flexible firewall/NAT software to mimic SOHO gateways [closed]

II am working on a project where I need to create a virtual machine that acts like a home gateway, so I am looking for the firewall/NAT that is most flexible. My hope would be that I could give some ...
1
vote
2answers
3k views

(Zywall USG 300) NAT bypassed when accessing in-house-server From LAN Via domain name

My situations is like this; i host a number of websites from within our joint network solution. On the network is basically 3 categories: the known public, registered via mac, given static dhcp ...
0
votes
2answers
837 views

Windows Server 2008 dropping connections [closed]

Possible quite similar to this post but I wonder if someone can help me with this issue. Home Server specs: Windows Server 2008 Standard (Non-R2) 2 NICs, external one(Realtek) has a firewall on it. ...