• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

NAT port forwarding overlaps

Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
8 Posts 5 Posters 5.2k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • M Offline
    mst
    last edited by Jan 25, 2010, 9:02 PM

    Hi

    I am trying to forward NAT port 5060 to specyfic IP and I have a problem becasue:

    •The external port range overlaps with an existing entry.

    5060 is already nated to the IP of Trixbox. IS then not posible to forward the same ports to different IPs?

    MST

    1 Reply Last reply Reply Quote 0
    • A Offline
      althornin
      last edited by Jan 25, 2010, 9:27 PM

      @mst:

      Hi

      I am trying to forward NAT port 5060 to specyfic IP and I have a problem becasue:

      •The external port range overlaps with an existing entry.

      5060 is already nated to the IP of Trixbox. IS then not posible to forward the same ports to different IPs?

      MST

      It is not possible - how would pfsense know which IP to forward traffic on that port to?

      1 Reply Last reply Reply Quote 0
      • M Offline
        mst
        last edited by Jan 25, 2010, 9:48 PM

        Hmmm I am confused or I was wrong.

        In 1.2.3 RC1 I was able to do NAT port forwarding to different IPS on the LAN. WHy it is not possible in 2.0? The same port 5060 I was able to forward to
        Trixbox and IP phones. Please let me know if there is something that I don't know. This work in other software firewalls. I don't know I think it was misunderstanding.

        Regards,

        MST

        1 Reply Last reply Reply Quote 0
        • M Offline
          mst
          last edited by Jan 25, 2010, 9:57 PM

          I am sorry my bed you are right althornin. Then how I can resolve the problem with the same port and multiple IPs.

          In Cisco ASA it is called SIP fixup and you can froward the same port to multiple IPS.

          Please advice.

          Thank you

          1 Reply Last reply Reply Quote 0
          • W Offline
            wallabybob
            last edited by Jan 25, 2010, 10:28 PM

            If its VOIP port forwarding you want then the Freeswitch package might be what you are looking for.

            1 Reply Last reply Reply Quote 0
            • M Offline
              mst
              last edited by Jan 26, 2010, 3:01 AM

              PLease take a look at a picture. There are 2 times that 5060 is forwarded to two different IPS in the same LAN. So , it is a bug? It is 1.2.3 RC1 stable release.

              NAT.JPG
              NAT.JPG_thumb

              1 Reply Last reply Reply Quote 0
              • C Offline
                chpalmer
                last edited by Jan 26, 2010, 3:18 AM

                Think of port forwarding as a freeway offramp. Your forcing all port 5060 traffic to the first IP.

                The second occurrence being further down the list should be ignored and not work.

                The RTP ports overlap also.  This can not work by design.

                Triggering snowflakes one by one..
                Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                1 Reply Last reply Reply Quote 0
                • D Offline
                  DennisBagley
                  last edited by Jan 27, 2010, 4:46 PM

                  Is it not possible to implement a virtual coin toss to help deal with these sort of issues ??

                  Puge

                  1 Reply Last reply Reply Quote 0
                  8 out of 8
                  • First post
                    8/8
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                    This community forum collects and processes your personal information.
                    consent.not_received