topic Re: Can I have a static bi-directional NAT rule and a PAT rule working together? in General Topics

Can I have a static bi-directional NAT rule and a PAT rule working together?

JoseCortijo — Thu, 09 Mar 2023 17:47:04 GMT

Hi,

I currently have a static NAT bi-directional policy, number 6 in the screenshot, that publishes an internal server (LAB-Skype) on Internet using a public IP (LAB-Skype-pub). This works fine.

Now I need to add an exception for port 443 for that public IP, which needs to be redirected to port 4443 towards the same internal server.

I tried to create a policy translating the original packet arriving at the public server (LAB-Skype-pub tcp/443) to the internal server (LAB-Skype tcp/4443). this is policy number 5 in the screenshot.

Unfortunately, I don't see any hit (0) on the policy. Any idea about what I am doing wrong?

Re: Can I have a static bi-directional NAT rule and a PAT rule working together?

Raido_Rattameister — Thu, 09 Mar 2023 18:45:34 GMT

If traffic comes from External zone it is destined to your firewall public IP.

Your firewall public IP is located in External zone.

It means that rule 5 destination zone must be External for this rule to match.

Re: Can I have a static bi-directional NAT rule and a PAT rule working together?

JoseCortijo — Mon, 13 Mar 2023 14:08:15 GMT

thanks a lot, you were so right!