Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Nat issues (port forwarding) across a private connection

    Scheduled Pinned Locked Moved NAT
    22 Posts 2 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bryanrh1 @bryanrh1
      last edited by

      @bryanrh1

      I have wireshark running on the webserver and I never see the traffic make it there. Still looking...

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        Well you see an response... So something freaking answered. Is it a RST?

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • B
          bryanrh1
          last edited by

          a0b0d7ce-cc6c-476a-a71b-d52a3132ad0b-image.png

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by johnpoz

            Not sure why your seeing dups? But you see the syn and the syn,ack

            So something is answering ;)

            Where exactly are you sniffing.. You clearly have dups there..

            Oh those are not dupes - those are 2 different sessions.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • B
              bryanrh1
              last edited by

              I agree and I really appreciate your help today.

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                Those are not dupes - you have dual sessions there... See the seq number and the source ports.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • B
                  bryanrh1
                  last edited by

                  On the edge router - because I never see the packets make it to the web server.

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by johnpoz

                    Well why is the edge router answering?? That is not its IP..

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • B
                      bryanrh1
                      last edited by

                      That is a very good question. After looking at the edge router there are some port forwarding for the wan interface for the same ports.

                      On Sunday I will delete all that port forwarding and try it again.

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        Lets us know how it turns out.. have to assume your forwarding the port to something else that is answering..

                        If just an router and not natting then there shouldn't be any forwards on it.. If its also firewalling - then should just be firewall rules allowing to stuff behind hit..

                        You sure its not natting? And just routing.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.