Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Need to open a nat from lan to lan via wan

    Scheduled Pinned Locked Moved NAT
    23 Posts 4 Posters 1.5k Views 4 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • kiokomanK Offline
      kiokoman LAYER 8
      last edited by

      uhm he didn't mentioned url but link, if he is trying with url instead of ip than yes you are right, you can't do that with nat reflection but only with split dns

      1 Reply Last reply Reply Quote 0
      • johnpozJ Offline
        johnpoz LAYER 8 Global Moderator
        last edited by johnpoz

        url or link - same thing.. What do you think a link is?

        If he is giving the client an IP - he is doing it freaking WRONG!!! Period!

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 25.07 | Lab VMs 2.8, 25.07

        A 1 Reply Last reply Reply Quote 0
        • A Offline
          assistenzanet95 @johnpoz
          last edited by

          @johnpoz
          the client using only public (Static) IP not URL

          @kiokoman
          i'll attach wan and lan rules

          Screenshot_2020-03-03 netsistemi localdomain - Firewall Rules WAN.png

          Screenshot_2020-03-03 netsistemi localdomain - Firewall Rules LAN.png

          1 Reply Last reply Reply Quote 0
          • kiokomanK Offline
            kiokoman LAYER 8
            last edited by kiokoman

            http://192.168.1.1/index.html isn't it a link ?
            [root@tristan]# ip link show
            1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
            link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

            i don't see any url here but i don't want to go against my master ๐Ÿ™ if you say it's not ๐Ÿ˜‚

            1 Reply Last reply Reply Quote 0
            • johnpozJ Offline
              johnpoz LAYER 8 Global Moderator
              last edited by johnpoz

              @assistenzanet95 said in Need to open a nat from lan to lan via wan:

              the client using only public (Static) IP not URL

              That is just plain MORONIC!!! Sorry but it is!!!

              Give your client a public fqdn vs an IP... That way if it ever has to change you do not contact all your clients (even if only 1) and say hey that link is now http://y.y.y.y vs http://x.x.x.x

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 25.07 | Lab VMs 2.8, 25.07

              A 1 Reply Last reply Reply Quote 0
              • A Offline
                assistenzanet95 @johnpoz
                last edited by

                @johnpoz said in Need to open a nat from lan to lan via wan:

                That is just plain MORONIC!!! Sorry but it is!!!

                i know but is a local service and the director of the structure want to access from external location also

                johnpozJ 1 Reply Last reply Reply Quote 0
                • kiokomanK Offline
                  kiokoman LAYER 8
                  last edited by kiokoman

                  remove block bogon and block private network from the WAN interface ..
                  they are pretty much useless anyway

                  A 1 Reply Last reply Reply Quote 0
                  • johnpozJ Offline
                    johnpoz LAYER 8 Global Moderator @assistenzanet95
                    last edited by

                    @assistenzanet95 said in Need to open a nat from lan to lan via wan:

                    want to access from external location also

                    Then give them a FQDN... A domain can cost as little as $1, shit free if your open for using one of the hundreds if not 1000s of free domains you can leverage.

                    Average lets call it 10$ for you domain name a YEAR... there is one thing if this your buddy and you want him to access your ftp server so you can exchange anime or something.. But this is a client - how are you doing any sort of business at all and not have a domain to use?

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 25.07 | Lab VMs 2.8, 25.07

                    1 Reply Last reply Reply Quote 0
                    • A Offline
                      assistenzanet95
                      last edited by

                      @johnpoz said in Need to open a nat from lan to lan via wan:

                      Then give them a FQDN... A domain can cost as little as $1, shit free if your open for using one of the hundreds if not 1000s of free domains you can leverage.
                      Average lets call it 10$ for you domain name a YEAR... there is one thing if this your buddy and you want him to access your ftp server so you can exchange anime or something.. But this is a client - how are you doing any sort of business at all and not have a domain to use?

                      Ok i know this, actually i manage over 50 domains for various customer, and obviously give them a domain to do this is the most correct solutions, but my question is why if i try to access to the service running on lan through public ip from the captive network it works, but if i try lan service through public ip from lan it doesn't work.

                      Currently the customers would not understand why it would have to buy a domain to use something he can use normally from the guest network

                      1 Reply Last reply Reply Quote 0
                      • kiokomanK Offline
                        kiokoman LAYER 8
                        last edited by

                        This post is deleted!
                        1 Reply Last reply Reply Quote 0
                        • A Offline
                          assistenzanet95 @kiokoman
                          last edited by

                          @kiokoman said in Need to open a nat from lan to lan via wan:

                          remove block bogon and block private network from the WAN interface ..
                          they are pretty much useless anyway

                          Block removed but is the same

                          1 Reply Last reply Reply Quote 0
                          • kiokomanK Offline
                            kiokoman LAYER 8
                            last edited by

                            nothing else here, maybe the host have its own firewall blocking external ip? check with packet capture / wireshark if you see the traffic

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.