Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    NAT port forwarding overlaps

    Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
    8 Posts 5 Posters 5.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mst
      last edited by

      Hi

      I am trying to forward NAT port 5060 to specyfic IP and I have a problem becasue:

      •The external port range overlaps with an existing entry.

      5060 is already nated to the IP of Trixbox. IS then not posible to forward the same ports to different IPs?

      MST

      1 Reply Last reply Reply Quote 0
      • A
        althornin
        last edited by

        @mst:

        Hi

        I am trying to forward NAT port 5060 to specyfic IP and I have a problem becasue:

        •The external port range overlaps with an existing entry.

        5060 is already nated to the IP of Trixbox. IS then not posible to forward the same ports to different IPs?

        MST

        It is not possible - how would pfsense know which IP to forward traffic on that port to?

        1 Reply Last reply Reply Quote 0
        • M
          mst
          last edited by

          Hmmm I am confused or I was wrong.

          In 1.2.3 RC1 I was able to do NAT port forwarding to different IPS on the LAN. WHy it is not possible in 2.0? The same port 5060 I was able to forward to
          Trixbox and IP phones. Please let me know if there is something that I don't know. This work in other software firewalls. I don't know I think it was misunderstanding.

          Regards,

          MST

          1 Reply Last reply Reply Quote 0
          • M
            mst
            last edited by

            I am sorry my bed you are right althornin. Then how I can resolve the problem with the same port and multiple IPs.

            In Cisco ASA it is called SIP fixup and you can froward the same port to multiple IPS.

            Please advice.

            Thank you

            1 Reply Last reply Reply Quote 0
            • W
              wallabybob
              last edited by

              If its VOIP port forwarding you want then the Freeswitch package might be what you are looking for.

              1 Reply Last reply Reply Quote 0
              • M
                mst
                last edited by

                PLease take a look at a picture. There are 2 times that 5060 is forwarded to two different IPS in the same LAN. So , it is a bug? It is 1.2.3 RC1 stable release.

                NAT.JPG
                NAT.JPG_thumb

                1 Reply Last reply Reply Quote 0
                • chpalmerC
                  chpalmer
                  last edited by

                  Think of port forwarding as a freeway offramp. Your forcing all port 5060 traffic to the first IP.

                  The second occurrence being further down the list should be ignored and not work.

                  The RTP ports overlap also.  This can not work by design.

                  Triggering snowflakes one by one..
                  Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                  1 Reply Last reply Reply Quote 0
                  • D
                    DennisBagley
                    last edited by

                    Is it not possible to implement a virtual coin toss to help deal with these sort of issues ??

                    Puge

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.