Unable to connect to WAN address from within the LAN.
-
My LAN address is 172.16.0.11. For the sake of this discussion, my Internet address is 10.10.10.1.
I have a rule that forwards connections to 10.10.10.1:25 to some box on the internal LAN, say 172.16.0.15:25. However, when I try to connect to 10.10.10.1:25 from 172.16.0.11, it doesn't work.
Connecting to 10.10.10.1:25 from some box out on the Internet works as expected: I get connected to 172.16.0.15:25.
What's interesting is that when I connect to 10.10.10.1:443 from 172.16.0.11, it appears I'm connecting to pfSense's web interface. So I think what is happening is that pfSense sees that I'm trying to connect to the Internet address from an internal address and therefore doesn't bother allowing the connection from the internal address to go out to the Internet and then come back.
Am I right? If so, what's the rule I need I need to write to disable this behavior?
-
@arcadio Do you have NAT reflection enabled on the NAT rule? (it doesn't need to be enabled globally)
-
Yeah you need NAT reflection or (preferably) split DNS to do that:
https://docs.netgate.com/pfsense/en/latest/recipes/port-forwards-from-local-networks.htmlSteve
-
Thanks guys. That was exactly what I needed. And thanks for pointing me to what I needed to read in the manual too.
