Dual Wan port forward without NAT - possible or not?



  • Hi!

    I've got a pfSense 2.0 box with 4 interfaces: LAN, DMZ, WAN1 and WAN2.
    I'm not using load balancing or failover, only policy routing based on IP address of the clients.
    Port forward is enabled on both WAN1 and WAN2 to servers in DMZ.
    NAT is disabled, because I want to log the IP address of visitors on webserver in DMZ.
    With NAT enabled, I would see the IP of the pfSense box in webserver's access logs.

    Port forward for WAN1 -> DMZ works, but for WAN2 -> DMZ doesn't.
    I guess the problem is that the reply packet goes through the default gateway of pfSense box,
    which is WAN.

    Is it possible to do port forward on both WAN interfaces without enabling NAT?



  • Port forward does not change source ip But outbound nat does.

    Change outbound nat to manual and create outbound nat just for traffic outgoing wan(if you need this)


Log in to reply