1:1 nat is not working

[miguelmirandag]

Hi to all, i am trying to configure a 1:1 nat, it is not working. This is what i have done:

• Configured a virtual ip of type ip alias, bounded to localhost.

• Configure 1:1 NAT using the virtual ip on wan and local ip in lan interface.

• Configured a rule to allow http traffic:

I try to load my web page and it gives timeout error.

What am i missing, is it necessary an outbound rule?

[KOM]

The NAT forum would be a better place to post this.

Are you testing from inside your network?

https://docs.netgate.com/pfsense/en/latest/nat/accessing-port-forwards-from-local-networks.html

[ptt]

Interface: "WAN" (instead Localhost)

https://docs.netgate.com/pfsense/en/latest/nat/1-1-nat.html

[KOM]

Good catch. That's probably exactly it.

Btw, you don't need a 1:1 NAT just for a web server. You can do it through a port forward.

[miguelmirandag]

I used localhost beacuse the local ip address of wan interface is private and i route a public segment via this private segment, thats what my provider sugested, somothing similar to loopback interfaces in routers.
I am trying the connection from inside (lan) network.
If i change the nat from 1:1 nat to por forware do i need to configure an outbound rule?

[KOM]

Then you have to either enable NAT reflection or configure your DNS to resolve your web server's FQDN to its LAN IP address, as per the document I linked to. Try it from the WAN side. Does it work then?

No, you don't need to play with outbound rules for those NATs.

I've never seen a NAT with localhost used. If you still can't get it working from either side, I would put it back to WAN as ptt suggested.