topic Re: FPR 1010 - Forward external port to a different internal port? in Network Security

FPR 1010 - Forward external port to a different internal port?

ovalpiston — Fri, 01 Oct 2021 13:58:26 GMT

I'm setting up an FPR1010. It's forwarding HTTPS (443) and SMTP (25) just fine to my internal web and email server. I followed a great guide here.

However, I want to have an external port (1211) be forwarded to my internal host at 192.168.1.211.

How do I setup NAT and Access Control to do this?

Re: FPR 1010 - Forward external port to a different internal port?

Rob Ingram — Fri, 01 Oct 2021 14:14:52 GMT

@ovalpiston

Have a look at the section "Inbound Access" in this link, it demonstrates how to configure static NAT and the ACP using FDM.

Re: FPR 1010 - Forward external port to a different internal port?

ovalpiston — Fri, 01 Oct 2021 14:21:24 GMT

Thanks, but that shows the same port incoming and destination. I have different incoming and destination ports.

Re: FPR 1010 - Forward external port to a different internal port?

Rob Ingram — Fri, 01 Oct 2021 14:41:49 GMT

@ovalpiston ok just create an object for the translated source port tcp/1211. When you create the NAT rule define the Translated Source Port as the object you created and the Original as the untranslated/real source port.

Re: FPR 1010 - Forward external port to a different internal port?

ovalpiston — Fri, 01 Oct 2021 14:54:02 GMT

Like the following screengrabs?

Re: FPR 1010 - Forward external port to a different internal port?

Rob Ingram — Fri, 01 Oct 2021 14:56:17 GMT

@ovalpiston yes, looks ok.

Re: FPR 1010 - Forward external port to a different internal port?

ovalpiston — Fri, 01 Oct 2021 16:42:56 GMT

Thanks! Works great! I am actually *not* changing port #s...the inside port is the same as the outside port.

Question: This works great for computers on the outside network, but what do I change for computers on the inside network? They aren't being redirected to the port like the outside computers are.

Re: FPR 1010 - Forward external port to a different internal port?

Rob Ingram — Fri, 01 Oct 2021 16:49:31 GMT

@ovalpiston ideally you would connect to the private/real IP address of the server instead of the NAT ip address.

If you cannot do that you'd have to use NAT reflection, example.

Re: FPR 1010 - Forward external port to a different internal port?

ovalpiston — Fri, 01 Oct 2021 20:14:15 GMT

The reflection link shows a great how-to, step by step, thank you.

The article, though, isn't for a specific port, which I need. In this case, it's 1225.

I followed the steps, but I'm not sure where to put the 1225 port entries?