Messages

1

General Discussion / Re: Problems setting up masquerading

« on: February 11, 2024, 11:05:02 pm »

Hello again,

just in case someone else is in need to find a solution like me:
The trick was that i needed to change the destination IP in the outbound rules to match the one i had configured in port forwarding rules.
That is because Port forwarding applies PRE routing, meaning its processed when the package enters the firewall. Outbound NAT apllies POST routing, so when the package is about to leave again. So i had to set the IP accordingly as it had been changed already then.

2

General Discussion / Re: Problems setting up masquerading

« on: November 30, 2023, 11:37:02 am »

Hey,

thanks for your reply. It is indeed an unusual scenario. I only resorted to it because of the need of having to be able to talk to multiple of those devices. The IP constraints led me to the idea of using the router to set up a NAT.
OPT1 already has 192.168.9.133 assigned as a fixed IP. Do i still need a virtual IP in that case?

As initially packages get sent to 192.168.57.10 and should be forwarded to 192.168.9.100 i had thought i need to set up outbound nat accordingly. Also i need to set up a second rule for packages coming from 192.168.9.100 going to 192.168.57.1.

Forwarding works both ways already, only source ip is not masqueraded. I.E. coming from the device, source IP should not be 192.168.9.100 but rather 192.168.57.10. In the other direction then 192.168.9.133 instead of 192.168.57.1.

Thanks again for your assistance!

3

General Discussion / [SOLVED] Problems setting up masquerading

« on: November 29, 2023, 01:19:33 pm »

Hi,

i have the following scenario:

There is an IoT device which can explicitly only have the IP 192.168.9.100 and can only be talked to via 192.168.9.133. The device is on OPT1 Port, which is forwarded to the OPT2 network, specifically to 192.168.57.1. If a package gets sent by 192.168.57.1 it will be forwarded to 192.168.9.100.
Everything works, packets are being routed through, but on the other side Source IP is still the one from the original Network. I tried to set up a outbound NAT rule but it seems not to work. I was hoping you could point out what i am doing wrong here.

I have attached my configured ruleset that i tried.

Thanks a lot!