Palo Alto and Docker configuration

[damian.krawczyk]

Hello Team,

I am a new in PA firewall. In my home lab I have old PA220 and Ubuntu host on which I have installed docker and few apps in cointainers. I have port forwarding rule which translate my local resources to my public IP address and ports- this work fine. But when app in cointainer wants to access from inside Ubuntu host to external IP address and port (which is translated to this local ubuntu host) I have timeout. I cannot see any traffic in logs, nothing. On some forum I found that: Some firrewalls are cranky about allowing traffic out and back in but I dont belive that there is no option to configure this correct in PA.

Problem: traffic from inside host try to rich his public IP address and come back to local ip- timeout. 

Any suggestion will be appreciated.

Sorry for my poor english 🙂

Regards,

Damian

[damian.krawczyk · Accepted solution]

Solution is configure U-Turn Nat