Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pass LAN workstation IP thru to server in DMZ

    Scheduled Pinned Locked Moved NAT
    3 Posts 2 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      vonskippy
      last edited by

      Apache Server 192.168.3.17
      PFSense DMZ 192.168.3.1
      PFSense LAN 192.168.1.1
      LAN Workstations 192.168.1.x

      Using NAT REFLECTION, the LAN workstations are able to browse the website on the DMZ server via the URL.

      Unfortunately, the Apache Log's show all LAN traffic as coming from 192.168.3.1 (i.e. the DMZ IP).

      In order to setup a "allow LAN IP's free access and require external IP's to enter username/password" .htaccess file I need to have the Apache server "see" the local lan IP's.

      Not sure if this is a NAT problem or a Firewall Rule problem (so sorry if this is posted in the wrong section).

      1 Reply Last reply Reply Quote 0
      • P
        podilarius
        last edited by

        If all the LAN is going to 3.1. then it would be NAT that is doing that through the reflection. It would be better to setup a split DNS so that when a user goes to the URL, it pulls the internal address instead of external. Then it would not NAT, only route, which passes the internal address on the LAN.

        1 Reply Last reply Reply Quote 0
        • V
          vonskippy
          last edited by

          Yup, using the internal IP address for the webserver solves the problem.

          Thanks.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.