Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Is it possible to redirect local traffic

    Scheduled Pinned Locked Moved Firewalling
    4 Posts 3 Posters 2.6k Views 3 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A Offline
      aaronouthier
      last edited by

      Hello, I am setting up a PBX box on my local network. I have a reverse Proxy setup for my Web Traffic coming in from the Interwebs, and DNS Resolver configured to point internal traffic from my FQDN to my proxy. I have NAT rules configured to route WAN SIP and RTP traffic directly to my PBX, however, local traffic is directed via DNS and is thus also sent to my proxy which is a different host internally from my PBX. For my stationary phones, this isn't an issue, as I can configure them to use the raw IP address. For my Cell Phone and laptop however, which roam in and out of my LAN, this becomes an issue. Is is possible to redirect traffic destined for one IP on a given port to a different IP on that same port within the same LAN? If so, how?

      S JKnottJ 2 Replies Last reply Reply Quote 0
      • S Offline
        SteveITS Rebel Alliance @aaronouthier
        last edited by

        @aaronouthier I think you are looking for NAT Reflection. Or split DNS, linked on that page.

        Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
        When upgrading, allow 10-15 minutes to reboot, or more depending on packages, and device or disk speed.
        Upvote 👍 helpful posts!

        1 Reply Last reply Reply Quote 0
        • JKnottJ Offline
          JKnott @aaronouthier
          last edited by

          @aaronouthier

          To properly support cell phones and devices tethered to them, you should try to set up your PBX to use IPv6, if possible. 4G & 5G phones are IPv6 only and use a translation protocol to send IPv4 over IPv6 networks. Android phones use 464XLAT. I don't know what iPhones use. There's no need for NAT with IPv6.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel 1 Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          1 Reply Last reply Reply Quote 0
          • A Offline
            aaronouthier
            last edited by aaronouthier

            I just wanted to follow-up, and not leave you guys hanging.

            I realized that only Web Traffic needed to be behind the Reverse proxy (for the WebIF), whereas SIP and RTP did not. I am already using split DNS, but I setup one DNS entry for PBX.fqdn that points to my reverse proxy, and SIP.fqdn to point to my actual server. That way, my phones can be directed to the sip server, and my web browser to my proxy. Done.

            However, since I disabled all IPv6 traffic on my network, I was having issues connecting from outside, as was mentioned.

            Now, I have the PBX system moved to a $5/month cloud server. Time will tell if it has enough resources to accommodate my usage. It has a setup similar to the aforementioned.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.