Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Reflection just won't work.

    Scheduled Pinned Locked Moved NAT
    18 Posts 3 Posters 5.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      BVZVC
      last edited by


      1 Reply Last reply Reply Quote 0
      • B
        BVZVC
        last edited by

        Is there anymore information I should provide? I'm really at a loss here.

        1 Reply Last reply Reply Quote 0
        • H
          hoba
          last edited by

          What's that DMZ>LAN outbound NAT rule for???

          1 Reply Last reply Reply Quote 0
          • B
            BVZVC
            last edited by

            That's so that from the LAN I can access the DMZ.

            1 Reply Last reply Reply Quote 0
            • H
              hoba
              last edited by

              You don't need to nat from lan to dmz. Remove it.

              1 Reply Last reply Reply Quote 0
              • B
                BVZVC
                last edited by

                Done, but that didn't fix the problem. Is there any more info you need?

                1 Reply Last reply Reply Quote 0
                • H
                  hoba
                  last edited by

                  The more I look at your otbound NAT config the more I am puzzled. I think you don't need it at all. Try disabling AON again and retest. There is nothing in there that is not handled by the default natting that is present when AON is disabled. Well, there are even some things missing in your manual outbound nat configuration I think.

                  1 Reply Last reply Reply Quote 0
                  • B
                    BVZVC
                    last edited by

                    I need the outbound NAT because I the LAN to only go out on WAN_CABLE

                    1 Reply Last reply Reply Quote 0
                    • H
                      hoba
                      last edited by

                      No, wrong. Only firewallrules determine what goes out which wan. Outbound nat only specifies wether the traffic is natted or not.

                      1 Reply Last reply Reply Quote 0
                      • B
                        BVZVC
                        last edited by

                        Switched to Automatic outbound NAT.

                        Exact same scenario.

                        1 Reply Last reply Reply Quote 0
                        • H
                          hoba
                          last edited by

                          Try diagnostics>states, reset states. Then retest nat reflection.

                          1 Reply Last reply Reply Quote 0
                          • B
                            BVZVC
                            last edited by

                            Still a no go. Does this have to do with the MultiWAN?

                            1 Reply Last reply Reply Quote 0
                            • H
                              hoba
                              last edited by

                              I have 3 wans and 6 internal subnets at the office with a CARP setup and even vlanned. Reflection is working just fine. Don' know why it's not working for you. I'm out of ideas  ???

                              1 Reply Last reply Reply Quote 0
                              • B
                                BVZVC
                                last edited by

                                I've even re-installed pfSense

                                1 Reply Last reply Reply Quote 0
                                • C
                                  cmb
                                  last edited by

                                  If you're using 1:1 NAT, reflection won't work, but that doesn't appear to be the case. It also doesn't work for ranges of more than 500 ports, but you don't have that either.  Do you see anything relevant in the system log?

                                  1 Reply Last reply Reply Quote 0
                                  • B
                                    BVZVC
                                    last edited by

                                    nothing gets blocked.

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.