FPR 1010 - Forward external port to a different internal port?

[ovalpiston]

I'm setting up an FPR1010. It's forwarding HTTPS (443) and SMTP (25) just fine to my internal web and email server. I followed a great guide here.

However, I want to have an external port (1211) be forwarded to my internal host at 192.168.1.211.

How do I setup NAT and Access Control to do this?

[Rob Ingram]

@ovalpiston 

Have a look at the section "Inbound Access" in this link, it demonstrates how to configure static NAT and the ACP using FDM.

[ovalpiston]

Thanks, but that shows the same port incoming and destination. I have different incoming and destination ports.

[Rob Ingram]

@ovalpiston ok just create an object for the translated source port tcp/1211. When you create the NAT rule define the Translated Source Port as the object you created and the Original as the untranslated/real source port.

[ovalpiston]

Like the following screengrabs?

[Rob Ingram · Accepted solution]

@ovalpiston yes, looks ok.

[ovalpiston]

Thanks! Works great! I am actually *not* changing port #s...the inside port is the same as the outside port.

Question: This works great for computers on the outside network, but what do I change for computers on the inside network? They aren't being redirected to the port like the outside computers are.

[Rob Ingram]

@ovalpiston ideally you would connect to the private/real IP address of the server instead of the NAT ip address.

If you cannot do that you'd have to use NAT reflection, example.

[ovalpiston]

The reflection link shows a great how-to, step by step, thank you.

The article, though, isn't for a specific port, which I need. In this case, it's 1225.

I followed the steps, but I'm not sure where to put the 1225 port entries?