Portforwarding FIN_WAIT_2:FIN_WAIT_2

delan009

The situation :

Wan fixed ip
Lan 10.70.200.254
VLAN 100 : 10.70.100.254
VLAN 180 : 192.168.3.1

Rules on VLAN's everything to everything

Device 192.168.3.28(with webservice) on VLAN 180
I can reach this device from VLAN 100, no problem

Now i want to reach this device from outside.

I created a NAT portforwarding.
The port i choosed was 42536. The setting :

INT pro SA SP dest.adr dest.p. NAT IP NAT Port

WAN TCP * * WAN address 42536 192.168.3.28 (http)80

I checked the port and this is een open port (portchecker)

When i go to ip-Wanadress with port(42536) from home, i get follow (in the state table) :

Interface protocol source(original source) Destination(original destination) state pakkets Bytes

WAN TCP home-address:55177 192.168.3.28:80(wanaddress:42536) FIN_WAIT_2:FIN_WAIT_2 6 / 4 658 B / 257 B

So i get no website due the Fin_Wait_2

What (where) can i do to solve this problem?

It's already day's i struggle with it.

Please help me

johnpoz

So your trying to do nat reflection - did you enable that? test your access from the actual outside.. Not a nat reflection.

delan009

NAT Reflection mode for port forward is disabled (system-advanced-firewallNAT)

I have enabled on pure NAT –> no connection and still FIN_WAIT_2

i have enabled NAT + Proxy --> no site and still FIN_WAIT_2

Thanks for reply

johnpoz

You do undestand fin_wait 2 is normal after fin.. Normally this is a faulty application.. And you sure your not looking at old states..

Why exactly do you even need nat reflection - just access the http directly.. Does your port forward work from outside… Then your down.. There is zero reason for nat reflection.. just use a host override to access the local IP be whatever name is you want that you use on the outside.