#18057: NAT Loopback, NAT Reflection appears to be broken.
------------------------------+-------------------------------------
Reporter: wbr@… | Owner: jow
Type: defect | Status: assigned
Priority: response-needed | Milestone:
Component: base system | Version: Barrier Breaker 14.07
Resolution: | Keywords: nat loopback reflection
------------------------------+-------------------------------------
Comment (by anonymous):
no, 251 is ESXI server and 203 is the iPhone ... but I just got it to
work, although I dont quiet understand it ...
the difference with working and non-working is that the ESXi one has a WAN
based rule as well as the LAN rule. The SSH one does not. I just added
the external route for 22201 (which I dont actually want) and it worked.
I started thinking that its just going outside to get back inside, but if
you remove the LAN to LAN rule for 4433 for example, telnet to
192.168.1.254 4433 doesnt work anymore. I have included all the relevant
rules below ... so is there a way to do the 22 one without needing the WAN
rule?
config redirect
option target 'DNAT'
option src 'lan'
option dest 'lan'
option proto 'tcp'
option src_dport '22201'
option dest_port '22'
option dest_ip '192.168.1.203'
option name 'INT-SSH-iPhone-Reflection'
config redirect
option target 'DNAT'
option src 'wan'
option dest 'lan'
option proto 'tcp'
option src_dport '22201'
option dest_ip '192.168.1.203'
option name 'SSH-iPHone'
option dest_port '22'
###############################
config redirect
option target 'DNAT'
option src 'wan'
option dest 'lan'
option proto 'tcp'
option src_dport '4433'
option dest_port '443'
option name 'vSphere to ESXi'
option dest_ip '192.168.1.251'
config redirect
option target 'DNAT'
option src 'lan'
option dest 'lan'
option proto 'tcp'
option src_dport '4433'
option dest_port '443'
option name 'INTERNAL-vSphere to ESXi'
option dest_ip '192.168.1.251'
--
Ticket URL: <https://dev.openwrt.org/ticket/18057#comment:27>
OpenWrt <http://openwrt.org>
Opensource Wireless Router Technology
_______________________________________________
openwrt-tickets mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-tickets
