LAN issues... external ip not accessable internally

petesei

Newbie here with pfSense. Have a 4200 recently setup and have this issue.
Scenario: Client users FileMakerPro (server onsite) and typically, whilst onsite, I would be able to create a HOST connection using the External IP of the site in the Hosts file connection setup.
Now, internally, I cannot get to the external IP.
Any reason why this would be happening?

viragomann

@petesei said in LAN issues... external ip not accessable internally:

Now, internally, I cannot get to the external IP.
Any reason why this would be happening?

Basically this should be possible, as far as you have a firewall rule in place, which allow access to the respective IP.

However, my guess is, that you forward the traffic on the WAN to the internal IP. But the port forwarding rule is only applied to traffic entering the interface, where the rule is defined on, so only on the WAN.

To have port forwarding rules applied to internal interfaces as well you need to enable "NAT reflection" in the rules.

stephenw10

Yup, probably: https://docs.netgate.com/pfsense/en/latest/recipes/port-forwards-from-local-networks.html#accessing-port-forwards-from-local-networks

petesei

@stephenw10 @viragomann

Thanks.. yes, it was NAT Reflection, thank you very much.

All good now.