OPNsense Forum

English Forums => 24.7, 24.10 Legacy Series => Topic started by: jjrushford on July 29, 2024, 10:27:48 PM

Title: port forwarding with NAT reflection
Post by: jjrushford on July 29, 2024, 10:27:48 PM
I recently replaced my Netgear router with OPNsense and am running the latest version.  I re-established my WebDAV port forward and it's working fine with the exception NAT reflection.  It is my understanding the with NATe reflection enabled that I should be able to use the port forward from the local LAN by using the WAN IP address/url.  I've found that I can only access the WebDAV port forward using the WAN URL only when I'm remote and I have to use the local URL when on the LAN.  I'm wondering if there are any additional requirements to get the NAT reflection to work?  Does it require some special firewall rule?  I have a rule in for just the port forward from the WAN. 
Title: Re: port forwarding with NAT reflection
Post by: Monviech (Cedrik) on July 29, 2024, 11:33:05 PM
https://docs.opnsense.org/manual/how-tos/nat_reflection.html
Title: Re: port forwarding with NAT reflection
Post by: jjrushford on August 04, 2024, 05:23:59 PM
Thanks for the link to the documentation.  I have a simple setup.  I just have a LAN and WAN interface with no DMZ.  On my LAN, I have a WebDAV server and port forwarding works fine when I'm away from my home network. However, I cannot get the port reflection to work.  I've tried the port reflection Method 1 configuration as described in the documentation precisely except I did not add a DMZ rule as I do not have a DMZ.  Method 1 is not working.  I'm new to OPNsense and firewall rules and am not sure how to troubleshoot/fix this.  Any ideas are greatly appreciated.
Title: Re: port forwarding with NAT reflection
Post by: Monviech (Cedrik) on August 04, 2024, 05:44:19 PM
The DMZ is just an example.

In your case you need the WAN/LAN Port Forward rule, and additionally the LAN Outbound NAT rule. Then it will work.
Title: Re: port forwarding with NAT reflection
Post by: jjrushford on August 06, 2024, 02:34:51 AM
Thanks for your help!  I got it working by adding the outbound NAT rule on the LAN.