Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Only open nat ip

    Scheduled Pinned Locked Moved NAT
    12 Posts 4 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hamed_forum
      last edited by

      Thank s you read it and so sorry for my bad language
      One site in internet  same test.com
      In my network only computer have nat1-1 can open test.com
      But another computer can't open it
      (We have many server weuse nat 1-1 for publish this and on this server can open test.com)

      1 Reply Last reply Reply Quote 0
      • H
        hamed_forum
        last edited by

        in Attachment show that only pc 192.168.20.12 open the test.com and other computer on lan cant open it
        same tracert in all of the
        where is problm?

        pfsense1.jpg_thumb
        pfsense1.jpg

        1 Reply Last reply Reply Quote 0
        • D
          doktornotor Banned
          last edited by

          And where's the 1:1 NAT here? SIGHUH.  ::)

          1 Reply Last reply Reply Quote 0
          • H
            hamed_forum
            last edited by

            IN Attachments I WRITE ONE NAT  20.20.20.15 TO 192.168.20.12
            (20.20.20.15 IS MY PUBLIC ip)
            on 192.168.20.12 i can open test.com but on other computer on my lan cant open test.com
            only test.com open clinet have public ip nat

            PFSENSE2.png
            PFSENSE2.png_thumb

            1 Reply Last reply Reply Quote 0
            • D
              doktornotor Banned
              last edited by

              Perhaps post in another subforum for your native language, because… WTF.  What's that useless screenshot supposed to show?

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                "same tracert in all of the"

                So lets ask again.. Are you clients trying to hit the public IP 20.20.20.15 for your site.com??

                Why not just hit the 192.168.20.x IP of the box hosting the site.com directly via a simple host override vs dealing with the abomination that is nat reflection..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • H
                  hamed_forum
                  last edited by

                  so  :-[ for me writing

                  why clinet dont have nat in pfsense cant open test.com
                  but clinet have 1-1nat can open test.com

                  pfsense1.jpg
                  pfsense1.jpg_thumb

                  1 Reply Last reply Reply Quote 0
                  • D
                    doktornotor Banned
                    last edited by

                    Wow, much more clear now!!!

                    1 Reply Last reply Reply Quote 0
                    • J
                      judgefred
                      last edited by

                      I think your run out ip because you mapping 1 public ip to 1 private ip.  Other computer don't have any other public IP to use, that why other computer can't access.  Can other computer access internet, for example yahoo.com?

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        So are you clients trying to go to 40.40.1.12??  While the box is right next to them on 192.168??  What is the point???  Just setup a host override to point test.com to your 192.168 address that it is being hosted on.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.