NAT with Source Adresse Alias not working

[Lip]

Hi Guys,

I'm trying to secure my 3cx PBX additionally. I would like to allow the SIP ports to enter only from an Source Address alias (tel.t-online.de).

Here is a screenshot.

If I delete the source alias, it works. It also works with the public IP address. But not with an alias.

Does somebody has any idea?

[viragomann]

Check if pfSense can resolve the host name.

[Lip]

It look's good!

[viragomann]

And have you ensured that the inbound connections are deriving from that source IP only when the NAT source is any by checking the firewall log?

[serbus]

Hello!

Under Diagnostics -> Tables, what is in the TelekomSIP table?

John

[Lip]

The problem is solved. The 3cx firewall check of course checks the ports from a different address than my aliases.