Only open nat ip

[hamed_forum]

Hi
I have many public nat 1-1
Some site don't open on lan network but open on IP have nat
This site on lan can ping and trace success but don't open in browser
In lan address that have nat trace same on other IP they don't open

[johnpoz]

read this like 3 times - not understanding your question..

So your trying to do nat reflection, hitting your wan public IP from inside your network?

[hamed_forum]

Thank s you read it and so sorry for my bad language
One site in internet  same test.com
In my network only computer have nat1-1 can open test.com
But another computer can't open it
(We have many server weuse nat 1-1 for publish this and on this server can open test.com)

[hamed_forum]

in Attachment show that only pc 192.168.20.12 open the test.com and other computer on lan cant open it
same tracert in all of the
where is problm?

[doktornotor]

And where's the 1:1 NAT here? SIGHUH.  ::)

[hamed_forum]

IN Attachments I WRITE ONE NAT  20.20.20.15 TO 192.168.20.12
(20.20.20.15 IS MY PUBLIC ip)
on 192.168.20.12 i can open test.com but on other computer on my lan cant open test.com
only test.com open clinet have public ip nat

[doktornotor]

Perhaps post in another subforum for your native language, because… WTF.  What's that useless screenshot supposed to show?

[johnpoz]

"same tracert in all of the"

So lets ask again.. Are you clients trying to hit the public IP 20.20.20.15 for your site.com??

Why not just hit the 192.168.20.x IP of the box hosting the site.com directly via a simple host override vs dealing with the abomination that is nat reflection..

[hamed_forum]

so  :-[ for me writing

why clinet dont have nat in pfsense cant open test.com
but clinet have 1-1nat can open test.com

[doktornotor]

Wow, much more clear now!!!

[judgefred]

I think your run out ip because you mapping 1 public ip to 1 private ip.  Other computer don't have any other public IP to use, that why other computer can't access.  Can other computer access internet, for example yahoo.com?

[johnpoz]

So are you clients trying to go to 40.40.1.12??  While the box is right next to them on 192.168??  What is the point???  Just setup a host override to point test.com to your 192.168 address that it is being hosted on.