I have a NAT server setup with 4 servers behind it. I have a PREROUTING entry to allow https/443 INTO my environment, specifically to to a web server running IIS on port 443. This works fine. However, whenever any of the 4 servers attempt OUTBOUND access on 443 (i.e., https://www.google.com), their traffic is rerouted to the IIS web server running on 443. In other words, when I access https:// from any machine behind the nat server, it redirects my traffic to my internal server hosting IIS. Removing the prerouting entry obviously resolves the issue, but I need to allow 443 in. Any idea how to resolve this?
Current IP Table:
Chain PREROUTING (policy ACCEPT 12621 packets, 1054K bytes) pkts bytes target prot opt in out source destination 7384 383K DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 to:10.10.11.17:443
Chain INPUT (policy ACCEPT 1 packets, 52 bytes) pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 11483 packets, 1155K bytes) pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 99260 packets, 5162K bytes) pkts bytes target prot opt in out source destination 93469 7682K MASQUERADE all -- * eth0 10.10.10.0/23 0.0.0.0/0