Need help with NAT reflection



  • I'm trying to get access to my ownCloud server, from within my own LAN using my external IP name.  I want to be able to setup my ownCloud app on my phone to work both at home and away from home.

    I have it working with NAT forwarding when I'm away from home, so I know that part works fine.  What I don't know is how to get it to work from within my LAN.

    I enabled Pure NAT reflection, reflection for 1:1 NAT, and automatic outbound NAT for reflection, but it still doesn't work.

    What else do I need to do to get this working?

    thanks,
    david


  • Banned

    Use split DNS. End of story.


  • LAYER 8 Global Moderator

    ^ concur.. While on your home network it is much better solution to resolve to the local IP vs trying to reflect off public IP back in.. Makes no sense from security, performance or just plan common sense to bounce off a public IP and hairpin your traffic through your lan interface when the IP your trying to hit is right next to you.

    It takes 2 seconds to setup dns over ride to resolve whatever fqdn your using to the private IP your forwarding too.

    While there might be some really rare sorts of setups where nat reflection makes sense - this is not one of them..



  • That worked splendidly!

    thanks for the help
    david



  • I'm trying to do something similar with a DDNS service.  I have one domain I want to redirect to multiple internal IP based on port.

    myddns.org:40001 –> 192.168.10.41:40001
    myddns.org:40002 --> 192.168.10.42:40002

    Right now I am accomplishing this with multiple DDNS hosts

    host1.myddns.org --> 192.168.10.41
    host2.myddns.org --> 192.168.10.42

    I'd rather not have 6 different ddns hosts and just redirect to the various internal IP's with one domain and use different ports with each IP.


  • Banned

    @Bigzaj:

    I'm trying to do something similar with a DDNS service.  I have one domain I want to redirect to multiple internal IP based on port.

    You already have your own thread.


Log in to reply