return route to DMZ not working
-
I have a /30 for my WAN and a /28 for my DMZ. My LAN is using one of the public's from the /28 as the NAT IP for outbound traffic. I have a public facing server on the DMZ with the static public IP on it. I have the appropriate rules to secure it. This server I am able to access it from the public internet, but not from my LAN. I have checked the server and apparently it is getting the traffic from the WAN ip, but I am guessing the return traffic is being blocked. Not sure how to diagnose this because I am not seeing anything on the firewall logs to indicate that the traffic is being blocked on the firewall. I am not blocking my IP or anything on the server ie, fail2ban and/or iptables. When I do a simple ping test, the traffic gets to the server from my LAN, but doing a tcpdump on my computer, I am not seeing the return traffic come back to me.
At one point this was working. I know that from the server's perspective nothing has changed on it in a very long time. I am not sure if I changed something on the firewall to break it. The only thing I remember doing was upgrading the firewall to 2.5.2. (I am not saying this broke it, just saying it is the only thing I remember doing).
Any idea how to fix this and/or how to troubleshoot this further?