1:1 Nat only works in one direction
-
Hi All,
I have a very strange issue with a Virtual IP and 1:1 Nat being able to send packets but never a response.
Basically I have created a virtual "IP Alias" of 10.1.1.1/8 on the LAN interface.
I then create a 1:1 NAT Mapping for 10.1.1.1 pointing to 10.0.0.4 (web server and other services)
Everything seems to be OK. 10.0.0.4 receives traffic but doesn't seem to be able to send a reply. It's like it can't send the synack or doesn't get a reply?
This used to work fine so either something in an update or maybe a config change has broken it. I've spent most of today on this and I'm finally bamboozled and to what the problem is.
Anybody got any pointers?
-
@milonic said in 1:1 Nat only works in one direction:
Basically I have created a virtual "IP Alias" of 10.1.1.1/8 on the LAN interface.
I then create a 1:1 NAT Mapping for 10.1.1.1 pointing to 10.0.0.4 (web server and other services)
Both in the same subnet? How should pfSense route then?
Basically I think, there cannot be any need for a /8 network at any location.
-
@milonic Did you mean to use 10.1.1.1/24 for the VIP?