I have a problem I cant seem to comprehend, here's the thing: I want to have access to a LAN server on from the firewall ( This network is managed by eth0, and I can (obviously) access any host within that network without problems.

However, I am unable to access it from the WAN interface (, that is, eth3). Here's the Nmap scan results for each interface.

$ nmap -e eth0 // 443/tcp open https

$ nmap -e eth3 // 443/tcp filtered https

DNAT   tcp  --  eth3 any anywhere anywhere  tcp dpt:https  to: 

MASQUERADE  all  --  any    eth0    anywhere             anywhere            
MASQUERADE  all  --  any    eth3    anywhere             anywhere   

$ ip route

  • dev eth0 proto kernel scope link src
  • dev eth3 proto kernel scope link src

The weird thing is that has access and is able to ping both (gateway IP) and (eth3, firewall interface)

I think it could be an ip route issue, but I don't know how to set it up correctly. Any help is appreciated!

  • What do you mean by "I cant access my server". Do you mean HTTPS ? – Antoine Orsoni Nov 8 '16 at 9:50
  • I don't see any error here. – Ipor Sircer Nov 8 '16 at 10:01
  • Yes, I mean HTTPS (I have setup port forwarding on my gateway to - the firewall) and I should be able to access my LAN host from the Internet... – yudontwork Nov 8 '16 at 10:06
  • Why are you trying to masquerade in both directions? I'm surprised this passes any traffic at all. – Michael Hampton Nov 8 '16 at 13:48
  • Yes the masquerade is in a way. I can't quite get the picture yet. So you gateway and firewall are different machines? – Str82DHeaD Nov 8 '16 at 14:30

The switch / gateway for your WAN interface probably has Hairpinning disabled and is refusing to route LAN traffic to the WAN interface back to the LAN.

| improve this answer | |
  • Indeed, the problem was situated at the gateway level. I reset it and reconfigured it and everything's working fine. @Michael Hampton the masquerade for eth0 was a test. – yudontwork Nov 8 '16 at 14:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.