Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Need to open a nat from lan to lan via wan

    Scheduled Pinned Locked Moved NAT
    23 Posts 4 Posters 1.5k Views 4 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ Offline
      johnpoz LAYER 8 Global Moderator
      last edited by johnpoz

      url or link - same thing.. What do you think a link is?

      If he is giving the client an IP - he is doing it freaking WRONG!!! Period!

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 25.07 | Lab VMs 2.8, 25.07

      A 1 Reply Last reply Reply Quote 0
      • A Offline
        assistenzanet95 @johnpoz
        last edited by

        @johnpoz
        the client using only public (Static) IP not URL

        @kiokoman
        i'll attach wan and lan rules

        Screenshot_2020-03-03 netsistemi localdomain - Firewall Rules WAN.png

        Screenshot_2020-03-03 netsistemi localdomain - Firewall Rules LAN.png

        1 Reply Last reply Reply Quote 0
        • kiokomanK Offline
          kiokoman LAYER 8
          last edited by kiokoman

          http://192.168.1.1/index.html isn't it a link ?
          [root@tristan]# ip link show
          1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
          link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

          i don't see any url here but i don't want to go against my master ๐Ÿ™ if you say it's not ๐Ÿ˜‚

          1 Reply Last reply Reply Quote 0
          • johnpozJ Offline
            johnpoz LAYER 8 Global Moderator
            last edited by johnpoz

            @assistenzanet95 said in Need to open a nat from lan to lan via wan:

            the client using only public (Static) IP not URL

            That is just plain MORONIC!!! Sorry but it is!!!

            Give your client a public fqdn vs an IP... That way if it ever has to change you do not contact all your clients (even if only 1) and say hey that link is now http://y.y.y.y vs http://x.x.x.x

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 25.07 | Lab VMs 2.8, 25.07

            A 1 Reply Last reply Reply Quote 0
            • A Offline
              assistenzanet95 @johnpoz
              last edited by

              @johnpoz said in Need to open a nat from lan to lan via wan:

              That is just plain MORONIC!!! Sorry but it is!!!

              i know but is a local service and the director of the structure want to access from external location also

              johnpozJ 1 Reply Last reply Reply Quote 0
              • kiokomanK Offline
                kiokoman LAYER 8
                last edited by kiokoman

                remove block bogon and block private network from the WAN interface ..
                they are pretty much useless anyway

                A 1 Reply Last reply Reply Quote 0
                • johnpozJ Offline
                  johnpoz LAYER 8 Global Moderator @assistenzanet95
                  last edited by

                  @assistenzanet95 said in Need to open a nat from lan to lan via wan:

                  want to access from external location also

                  Then give them a FQDN... A domain can cost as little as $1, shit free if your open for using one of the hundreds if not 1000s of free domains you can leverage.

                  Average lets call it 10$ for you domain name a YEAR... there is one thing if this your buddy and you want him to access your ftp server so you can exchange anime or something.. But this is a client - how are you doing any sort of business at all and not have a domain to use?

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 25.07 | Lab VMs 2.8, 25.07

                  1 Reply Last reply Reply Quote 0
                  • A Offline
                    assistenzanet95
                    last edited by

                    @johnpoz said in Need to open a nat from lan to lan via wan:

                    Then give them a FQDN... A domain can cost as little as $1, shit free if your open for using one of the hundreds if not 1000s of free domains you can leverage.
                    Average lets call it 10$ for you domain name a YEAR... there is one thing if this your buddy and you want him to access your ftp server so you can exchange anime or something.. But this is a client - how are you doing any sort of business at all and not have a domain to use?

                    Ok i know this, actually i manage over 50 domains for various customer, and obviously give them a domain to do this is the most correct solutions, but my question is why if i try to access to the service running on lan through public ip from the captive network it works, but if i try lan service through public ip from lan it doesn't work.

                    Currently the customers would not understand why it would have to buy a domain to use something he can use normally from the guest network

                    1 Reply Last reply Reply Quote 0
                    • kiokomanK Offline
                      kiokoman LAYER 8
                      last edited by

                      This post is deleted!
                      1 Reply Last reply Reply Quote 0
                      • A Offline
                        assistenzanet95 @kiokoman
                        last edited by

                        @kiokoman said in Need to open a nat from lan to lan via wan:

                        remove block bogon and block private network from the WAN interface ..
                        they are pretty much useless anyway

                        Block removed but is the same

                        1 Reply Last reply Reply Quote 0
                        • kiokomanK Offline
                          kiokoman LAYER 8
                          last edited by

                          nothing else here, maybe the host have its own firewall blocking external ip? check with packet capture / wireshark if you see the traffic

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.