Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Nat Reflection not working

    Scheduled Pinned Locked Moved NAT
    5 Posts 4 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      do1984
      last edited by

      Well, we have a website that runs an application through an iframe. Since we don't have a public static IP, we use dynamic DNS in order to update the IP. The user on the website clicks the link, it redirects to the xxx.ddns. We port forwarded that port (8084) from WAN to the local server (192.168.0.233 port 8084)
      The local server has a static IP (192.168.0.233/24), pointing the gateway to pfsense (192.168.0.89), and with Windows Server 2012 resolving the DNS (192.168.0.8).
      It works fine when we are accessing from outside. I know we have two options, and the classy one would be Split DNS (I've managed to make it work through split Dns), but for internal reasons we can't maintain that. So, NAT Reflection is what we've got left.
      I've tried everything and it just doesn't work!
      My Scenario:
      Modem - 192.168.25.1

      PfSense 2.3.3 (virtual inside Esxi 6.5) - 192.168.0.89 (lan) 192.168.25.43 (wan)
      Windows Server 2012 (192.168.0.8)
      I've enabled NAT Reflection mode for port forwards (Pure Nat), Enable NAT Reflection for 1:1 NAT (which I don't need, but just in case), Enable automatic outbound NAT for Reflection. The NAT Outbond is set to Automatic. I've tried the same with three different machines / ports, but none of them worked.
      I've no idea what's wrong.
      I remember I've used the reflection once when I was on Hyper-v and it worked flawessly. Any tips? Thank you so much
      ![Screen Shot 2017-03-09 at 15.54.48.png](/public/imported_attachments/1/Screen Shot 2017-03-09 at 15.54.48.png)
      ![Screen Shot 2017-03-09 at 15.54.48.png_thumb](/public/imported_attachments/1/Screen Shot 2017-03-09 at 15.54.48.png_thumb)
      ![Screen Shot 2017-03-09 at 15.55.05.png](/public/imported_attachments/1/Screen Shot 2017-03-09 at 15.55.05.png)
      ![Screen Shot 2017-03-09 at 15.55.05.png_thumb](/public/imported_attachments/1/Screen Shot 2017-03-09 at 15.55.05.png_thumb)

      1 Reply Last reply Reply Quote 0
      • N
        NOYB
        last edited by

        Doesn't work is not much to go on.  Maybe what happens vs. what is expected to happen would be a more useful starting point.

        Have a look at these.  See if they contain anything relevant to your issue.

        NAT Reflection and HSTS Documentation
        https://forum.pfsense.org/index.php?topic=118761.msg657405#msg657405

        NAT Reflection Troubles
        https://forum.pfsense.org/index.php?topic=98764.msg550173#msg550173

        [SOLVED] Re: NAT Reflection Troubles
        https://forum.pfsense.org/index.php?topic=98764.msg550431#msg550431

        And also the official on-line manual.

        1 Reply Last reply Reply Quote 0
        • D
          do1984
          last edited by

          Expected: From lan, connect to dynamic dns address. That address should reflect back to a workstation.
          I've gone through the Nat Reflection Troubles and none of the solutions have worked for me.
          Nat reflection is ON for port forwards (pure nat)
          port forward is properly set.
          The port forward works (can connect from outside), the reflection doesn't (can't connect from inside)

          1 Reply Last reply Reply Quote 0
          • K
            killmasta93
            last edited by

            or what you an do which is a hassle depends on how many computers is to put the dynamic DNS on each computer and point to the internal IP on the hosts what i dont understand why NAT reflection wont work in this case, As i have linux server on hyper V running nginx with wordpress and WPAD implemented and works perfect internally and externally

            or create an A record for your website and point to the internal in your windows server

            Tutorials:

            https://www.mediafire.com/folder/v329emaz1e9ih/Tutorials

            1 Reply Last reply Reply Quote 0
            • K
              kapi2454
              last edited by

              I think that you have the same problem that me.

              https://forum.pfsense.org/index.php?topic=127882.0

              Can you find a solution?

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.