Port forward works - randomly :D

[josey]

i have
WAN - DSL pppoe 3mbps/384kbps
OPT - cable  2mbps UL/DL

load balancing works fine, failover too, and i am very, very satisfied with PFS, it is awesome, BUT :)
on nat, port forwarding, i put ports 83, 85, 5900, 5901, etc. and i have put same rules on on opt and wan for all ports, but, some of them works over wan - dyndns and some over OPT, how? em i stupid or what  ???
for example, port 83 goes over OPT, but 85 goes over wan, same rules for both.

when i use pfs as single routing machine, and cable or dsl on WAN then ewerithing works just fine.

any ideas? thanks guys

[josey]

27 people have read this topic and no answer  ???  :-\

[GruensFroeschli]

I'm not sure if i understood that correctly but are you talking about NATing from the internet on two different IP's the same port to a single server?

If you access something from the "not working" interface. do you see something blocked in the firewall-log?
If you check the states do you see this specific connection you just established?

[josey]

@GruensFroeschli:

I'm not sure if i understood that correctly but are you talking about NATing from the internet on two different IP's the same port to a single server?

If you access something from the "not working" interface. do you see something blocked in the firewall-log?
If you check the states do you see this specific connection you just established?

ok lets go again

PFS single machine with
p4 1700mhz and 2x256mbddr with 80 gb hdd
3 DLINK nic
LAN 192.168.7.254
WAN dsl ppoe
OPT1 optic fiber link with static ip IP xxx.xxx.229.234, gateway xxx.xxx.229.233
load balancer and fail over works perfectly.

port forwarding on pfs machine works randomly on WAN and OPT

as i already said
ports forwarded to my LAN are 83, 85, 5901 etc…
so, if i someone try to connect to one of this ports over static IP over optic fiber, it can, but only for some ports, like 83, on 85 can not, but can over dsl.
firewall and nat rules are the same for all ports.
why is that happening?

[sai]

could we see the rules you have on OPT1 and WAN ?

[josey]

@sai:

could we see the rules you have on OPT1 and WAN ?

this is firewall part of rules from OPT1 link with static IP, wan is like copy paste

[josey]

after three days of f*ckin with firewall rules problem is solved.

on opt i put wan as gateway and  suddenly everything works. is that your error guys or mine?
i mean, there is no logic at all for that, but it works now.

[sai]

That does not make any sense to me either. What are your NAT rules?

[josey]

@sai:

That does not make any sense to me either. What are your NAT rules?

for example
interface OPT
external address ANY
protocol TCP/UDP
external port range (irrelevant)
nat ip some network IP (irrelevant)
internal port xxxx

on firewall rules everything same, except, gw is default, and default gw is WAN ???
:)

but it works now, no complain ;)