Chained nat
-
has anyone managed to get chained nat to work in PfSense, im looking to do something similar to proxy chaining where the setup would be something like
WAN–>pfsense wan ip--->pfsense wanip2---> host on wan2
where i would type in pfsense wan ip: 8000 if would nat to wanip2 8000
at which point the system would then nat wanip2 8000 to host on wan2 port 80.i have the system setup to the point where i am able to type in wanip2 8000 and get the web port of the host on wan2
i also have the nat setup for wan1 port 8000 to wanip2 8000 but cant get it to work from the wan1 side.
i have tested the forward from wan1 port 8000 to a lan host and it works so it may be a setting im missing to facilitate the chaining of wan rules. -
read this like 5 times and can not for the life of me figure out what your trying to accomplish..
-
One interpretation of their description is they have two NATs and want the first external NAT to forward port 8000 to the first internal NAT, then have that NAT forward to an internal host on port 80?
The confusing part is WAN is being used everywhere and there are no LANs? While WANs are an concept of a "wide area network", they also carry and assumption that they have publicly routable IP addresses. Of courseyou don't use NAT to connection routable IP addresses, so it's very confusing as to what is public and what is private.
-
So you agree its confusing to what they are after ;) Glad not just me…
-
Does this have some actually meaninful purpose?
-
Not sure because at a loss to what the OP is actually wanting to accomplish - can you make out what he wants to do?
-
Not at all… hence asking about what's the real purpose here... :D
-
has anyone managed to get chained nat to work in PfSense, im looking to do something similar to proxy chaining where the setup would be something like
WAN–>pfsense wan ip--->pfsense wanip2---> host on wan2
where i would type in pfsense wan ip: 8000 if would nat to wanip2 8000
at which point the system would then nat wanip2 8000 to host on wan2 port 80.i have the system setup to the point where i am able to type in wanip2 8000 and get the web port of the host on wan2
i also have the nat setup for wan1 port 8000 to wanip2 8000 but cant get it to work from the wan1 side.
i have tested the forward from wan1 port 8000 to a lan host and it works so it may be a setting im missing to facilitate the chaining of wan rules.not sure about your question . can you draw your network topology ?
if there are nat after nat affter nat .. going on and you want to forward a port for application at last nat translations..assign the host static ip and do it straigth from throughout the chain..
