I'd like to limit port forwarding to an inside IP so that only one specific /24 from outside can use that port
right now any outside (public) IP can use the port.
IP's for examples only
limit outside Public IP's to 192.168.2.0/24 instead of any
port 44440 forwarded to inside 172.16.0.2/32
172.16.0.2 has a public IP statically NATed to it
Here's what I've got in the config for this
name 10.1.10.4 Linuxpublic
name 172.16.0.2 Linux
name 192.168.2.0 Stockphone_outside
object-group service Stock_phone tcp-udp
port-object eq 44440
static (InsideLocal,KT-1) linuxpublic Linux netmask 255.255.255.255 dns
This line didn't work connection attempts time out.
access-list KT-1_access_in extended permit tcp Stockphone_outside 255.255.255.0 object-group Stock_phone host Linux object-group Stock_phone
This line allowed traffic but doesn't limit it to the desired outside subnet
access-list KT-1_access_in extended permit tcp any host Linuxpublic object-group Stock_phone
