Help to Edit /create Outbound/NAT Rules

ciambellone

Hello,
I've the following problem. I've configured Load Balancing for my web application. Now i can access to the public IP (VIP) only from dmz or vpn.
I think that the problem is Outbound/NAt Rules.
Please, if anyone may help to resolve this problem.

I've 2 PFServer + Carp + PFsync
Below there are the configuration.

Server A
WAN –> 178.33.94.33
DMZ --> 172.26.101.1
LAN --> 10.0.0.1
SYNC --> 10.155.0.1

Server B
WAN --> 178.33.94.34
DMZ --> 172.26.101.2
LAN --> 10.0.0.2
SYNC --> 10.155.0.2

VIP
WAN --> 178.33.94.43
DMZ --> 172.26.101.10
LAN --> 10.0.0.10

In the picture in the attach there is outbound rules.
Regards.

Cattura.PNG_thumb

Waco1

Is NAT reflection disabled? System->Advanced->NAT

ciambellone

Yes, There is the flag on the option.
Regards.
Matteo

Waco1

Disabling NAT reflection prevents users inside the firewall from accessing ports on the WAN interface.