I have a RV160 router. I have a Policy NAT for ssh that works, except... All ssh connections are showing as coming from the internal ip address of the router and not the actual source address. This makes it impossible to use as I can't employ anti-brute force tools to protect the server, since fail2ban and the like will ban the internal address thus shutting off access to everyone.
Is there a way to enable a passthru ssh connection that retains the original ip address?
I tried setting up a port forwarding rule, but the ssh connection is not being made on that (yes, I disabled the policy nat rule first).