<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Ping WAN VIP from LAN]]></title><description><![CDATA[<p dir="auto">Hi -<br />
Awesome software, thanks.</p>
<p dir="auto">I am running into one small issue.  I setup VIPs on the WAN.  These are Proxy ARP.<br />
I setup Port Forwarding and the Rules to go with it.</p>
<p dir="auto">From outside the LAN I can access the resources no problem.</p>
<p dir="auto">From inside the LAN I can't even ping the VIPs.</p>
<p dir="auto">From inside the LAN I <strong>CAN</strong> access the services on the WAN ip.</p>
<p dir="auto">I have heard this called a loopback or hair-pining.  I've heard some routers don't do this.  But it seems I am doing this on the WAN IP just cant do it on the VIPs.</p>
<p dir="auto">I have the default allow LAN -&gt; * rule.  Anywhere else I should be checking?</p>
<p dir="auto">Is Disable NAT Reflection relevant here?</p>
<p dir="auto">any help would be great.<br />
(this is not an emergency, I did not bring an untested firewall onsite to a client and now need immediate help with this free product.  I use it in my office and I like to try new things.</p>
<p dir="auto">I'm sick of seeing the paniced yells for help from people that didnt do their homework and now want some free support for the free product.)</p>
<p dir="auto">whew /RANT</p>
]]></description><link>https://forum.netgate.com/topic/9742/ping-wan-vip-from-lan</link><generator>RSS for Node</generator><lastBuildDate>Mon, 13 Apr 2026 02:42:22 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/9742.rss" rel="self" type="application/rss+xml"/><pubDate>Thu, 10 Jul 2008 23:20:10 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Ping WAN VIP from LAN on Fri, 11 Jul 2008 12:09:42 GMT]]></title><description><![CDATA[<p dir="auto">Are you really really sure that you can ping these VIP's now?<br />
Because it's NOT possible to ping proxy type VIP's.</p>
]]></description><link>https://forum.netgate.com/post/177145</link><guid isPermaLink="true">https://forum.netgate.com/post/177145</guid><dc:creator><![CDATA[GruensFroeschli]]></dc:creator><pubDate>Fri, 11 Jul 2008 12:09:42 GMT</pubDate></item><item><title><![CDATA[Reply to Ping WAN VIP from LAN on Fri, 11 Jul 2008 07:40:42 GMT]]></title><description><![CDATA[<p dir="auto">heh</p>
<p dir="auto">Unchecked Disable NAT Reflection and it works.</p>
<p dir="auto">Strange that even though it was checked I could still do NAT reflection on the main IP.</p>
]]></description><link>https://forum.netgate.com/post/177121</link><guid isPermaLink="true">https://forum.netgate.com/post/177121</guid><dc:creator><![CDATA[JointTech]]></dc:creator><pubDate>Fri, 11 Jul 2008 07:40:42 GMT</pubDate></item></channel></rss>