Thats awesome.  Should help the new guys alot.

oh yeah i know its easy to turn off and on, but i have a widget on my home screen, so that means i would have to have it on all the time otherwise the widgets wouldnt work, but its not a major problem.

And with my work, no need to bounce via proxy ..

So simple. Thank you for your help.

Hey Ryan
Im in the same boat you are.
did you ever get a full response or find an answer that worked.
any help would be awesome

thanks

Eric

Services - DNS Forwarder - Host Overrides

I had this same issue just recently.

I can ping the DMZ interface IP from LAN, but cannot ping hosts behind DMZ interface.

This was fixed by fixing the mistake I made during IP assignment in DMZ interface.

In DMZ static IP configuration i assigned a subnet of /32 which should be /24.

After the fix i can now ping hosts behind DMZ interface.

KOM and Derelict,

I added the alias and the firewall rules, and it's working beautifully. Piece of cake. I just needed a nudge in the right direction.  8)

Thanky you!
Eric

Ok, sorry about that!

Thanks for help me

Regards

Yeah - over a long haul, having that UDP port open SHOULD knock off alot of laggyness.

I use UDP VPN myself.  I'm not a big fan of opening ports on the wan for RDP directly.

sorry its taken a long time to respond went on holiday.

i added udp tcp ports rule that allow the server.exe file to pass through the windows firewall.

^ yeah, and not only wrong..  But nothing screams performance like hirpinning and letting your edge router/firewall handle traffic that it should never see.  What  sweet setup it must be because setting up dns might take a few minutes ;)

Thanx 4 the tip. It helped.

smile

Thanks @doktornotor

Solved

Thanks Derelict.

I especially liked your lab set-up, inspired me to spin up some pfsense virtuals and do some testing myself.  I was able to get this working in this lab setup, but on the actual live router it still does not work.  I'm at a loss but I have found a work around and can live without it so I'm going to have to draw the line under it and move on.

I am certainly more educated now, for which I am grateful.

Regards
Martin

Manual outbound NAT on LAN (or the internal interface where the AP resides) is what you need there.

OpenVPN tap is another option. NAT is easier since the VPN's already up and running from the sounds of it.