Port Forward + 1:1 NAT

tdickson

I have searched around and supposedly this is possible, but I have not been successful.

I have 1:1 setup and it works wonderfully!
I would like to add port forwarding as well though for those nat'd addresses.

Example:

64.0.0.1 –-- 1:1 Nat to ----- 192.168.5.10
This hosts a web server at mail.domain.com

I want to be able to type mail.domain.com when on the local subnet and have it redirected to the local IP.
I know nat redirects only work on port fowards and not 1:1, but I've found in the forums you can add port forward on top of 1:1 to do this.

I've set up 1:1 and it works, I also added a port forward as follows:
interface: LAN
external address: 64.0.0.1
proto: TCP
port: HTTP
NAT IP: 192.168.5.10
Local Port: HTTP

and checked auto create firewall rule...

what am I doing wrong?

tdickson

ok, I've tried using the external address as well as the internal address with no luck.

In this topic Hoba says you can add port forwarding on top of 1:1:
http://forum.pfsense.org/index.php?topic=858.0

I ended up setting up a local DNS server, but I still would love to scratch that and use port forwards instead.

Would it be better to scracth 1:1 and only use port foward with the virtualIP's? I have about 5 ports enabled on each IP anyway, so it wouldn't be to much work to add the forwards in.
Thanks!

hoba

I haven't tried portforward on top of 1:1 NAT myself. It might be that I was wrong here. The NAT-reflectionfeature is still under developement and there is discussion going on between the developers how to make it work for larger ranges and thus maybe 1:1 NATs too. Meanwhile split DNS might be the only solution for this problem.

tdickson

Thanks for the reply! I will stand by in anticipation ;D
You guys are the best!