Firewall/NAT

Like others, I have multiple IP's and want to do 1:1 NAT using the extra IP's.  I think I have configured every including an Any Any rule for testing but I can't seem to ping or manage the web server on the LAN side.  This is a pretty standard setup and not sure what I'm doing wrong. 


Here's what I got:

1:1 NAT
Interface     External IP     Internal IP     Description     
WAN    66.92.38.164/32    172.30.1.6/32    Trixbox

FW Rule
Proto     Source               Port  Destination     Port     Description
*     RFC 1918 networks     *     *                *     Block private networks (default rule)
*             *                          *   172.30.1.6       *        Any Any rule for trixbox

Services: Proxy ARP
Interface    Network    Description   
WAN    66.92.38.164     


This is it, right?   I even powered cycle all equipment on my side to rule out arp cache but still doesn't work.

you might wan't to check with your ISP and see if they can see your 66.92.38.164 in their ARP table.

CS...

sorry about the edit.  I was trying to digest your original post.

That's the only available selection.  I have multiple IP's on the WAN.

This is definitely not an ISP issue because it works direct w/o monowall.  Any other suggestions?

are you sure your m0n0wall's WAN CIDR is correct?

what address do you get back if you visit:  http://whatismyip.com/  from your Trixbox?

CS...

This is definitely not an ISP issue because it works direct w/o monowall.

That's not true, and leads me to another suggestion.

If you're using a different machine on that IP, and then switch it out for m0n0wall, you're going to be stuck for a few hours with virtually all ISPs because of the ARP cache on their routers. Cisco's default is 4 hours, in that case you'll have to wait 4 hours after disconnecting the previous machine before it'll work on m0n0wall.

So I'm confused, in the firewall rules (from public WAN to internal LAN) you allow access to the private ip address and not the public ip address?

Hi,

I tr use 1:1 NAT for my teo web server nerver work for me, only way able access from WAN IP is use differ port, the port 80 only able route to one ip unlike other router 1:1 NAT will map ONE WAN IP = ONE LAN IP and all ports will be open for access from WAN side.
on monowall after setup the 1:1 NAT you still need setup the port forwarding.

my setting exp.


WAN                 LAN

http://10.0.0.1       =    192.168.1.1     web1
http://10.0.0.2:81  =    192.168.1.2     web2 

are you sure your m0n0wall's WAN CIDR is correct?

what address do you get back if you visit:  http://whatismyip.com/  from your Trixbox?

CS...

Go here: http://wanip.org/

No advertisements (yet)