Messages

What is the current best / recommended way to add multiple additional WAN IPs. We are given some extra WAN IP in the form of 2 separate /29.

I want to be able to accept incoming traffic to those IP and direct specific ports to some services living on different internal IPs.

So far I've only managed to do 1:1 NAT to one of the internal IP. However this locks this single extra IP to a single internal IP (1:1) so I can't direct different services to different internal IP. This limit the usability of the extra IPs.

On our old firewall (Sophos UTM) we were able to add the additional IP to the WAN interface and then do 1:1 NAT or port port forward for single port or multiple port to one or more internal IP as needed. Also used masquerading to route out going traffic for internal IP to go via specific public IP.

Thanks.

After adding a new external IP to the WAN using 1:1 NAT I keep getting the below error popping up. I have no idea how to fix it. However everything seems working ok!

Code Select Expand

opnsense: /usr/local/etc/rc.filter_configure: New alert found: There were error(s) loading the rules: /tmp/rules.debug:52: invalid use of table <ACMAUS_Helspot_Internal_IP> as the source address of a binat rule - The line in question reads [52]: binat on igb1 from $ACMA_Helspot_Internal_IP to any -> 59.xx.xx.xx

Thanks.