Port forwarding on WAN, connecting from LAN
-
Simple problem: Lets say I'm forwarding port 80 from WAN interface to an address on the LAN subnet. How can I connect from workstations on the LAN subnet, but using the external IP address?
I've avoided this in the past with DNS or moving the service into a DMZ with external addresses, but in this case figuring out port mapping would be simpler.
-
Answered my own question by flipping through the NAT portion of The Book.
All that is needed is to enable NAT reflection, which is disabled by default.
And the DNS solution I have used in the past is called "split DNS". But if you can set up a proper DMZ using external addresses, this is a non-problem.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.