DM/NAT/Port forwarding

[ursus]

I am moving from Ubiquity 3Port Firewall. I have setup a DMZ and have my MailInABox server running perfectly. I thought I could setup the same thing on OPNSense - I am making a mess somehow and cannot find my error. When I have the Firewall: NAT: Port Forward rules set (attached) I can access the sites perfectly from the Internet (it therefore seems as if the rules are OK) but from the LAN side I am getting very weird responses. I enter a URL (eg. http://hecklerdesign.com/product/cliff/) -> the hecklerdesign.com part gets replaced with my own URL -> http://www.mydomain.cc/product/cliff/

I am not sure way this is but I was wondering if it might have something to do with the fact that MailInABox acts as a DNS server? Anybody have any pointers form me?

Thank you in advance

[vikozo]

will have to read the feedback too. ;-)

[ursus]

ok, found my error. When creating the NAT rules you need to select WAN address and not WAN net when creating the rule. It is also necessary to create an outgoing rule in the DMZ for the Mail in a box server.

[vikozo]

for the outgoing on the dmz side which port did you use ?

Code Select Expand

create an outgoing rule in the DMZ for the Mail in a box server.

[ursus]

Too be honest I allow all from the DMZ to WAN. I will specify ports I in the future but am learning OPNSense atm 😊 will want to setup ad blocking, IPsec instead of Arlo like I am using and a reverse proxy to host my other sites (tinyRSS and a wordpress site).