Can't get port forwarding to work

[uiterlix]

Hi,

I'm trying to setup a fairly standard HTTP port forwarding from the WAN to one of the machines in my local network.

What I did:
- In firewall settings/advanced:
  - enable Reflection for port forwards
  - enable Reflection for port forwards

- In firewall settings/nat/port forward
  - create a port forwarind rule with
     - protocol: TCP
     - destination: WAN address
     - destination port range from HTTP to HTTP
     - redirect target IP: tried both and Alias as wel as directly inputting the IP of the target node
     - redirect target port: 9000 (in this case portainer)
     - log: enabled
     - nat reflection: use system default
     - filter rule association: rule

Unfortunately the port forward does not seem to work. However when I check the log I do see a blue "rdr" log entry for the connection attempt.
I'm a bit lost on what's wrong here and would be really grateful if someone can point me in the right direction.

[CrunkCow]

I set up a port forward a long time ago for a game server so I went back and checked what I did. I saw that I also made a general firewall rule for WAN to allow that port for that internal destination. Not sure if it's by design for the rule to be necessary, but that's what I did and it works.

Edit: I removed my firewall rule and mine still works, so now the only difference between mine and yours is that my "filter rule association" is set to "none" and my redirect target IP is set to the internal target node. So I guess I can't really help, sorry. Are you confident that there's no firewall going on in the target node itself?

[uiterlix]

Ok, apparently it was already too late in the evening when I tried.
The host I was forwarding to had a different default gateway so NAT requests didn’t work for that host.
Fixed that and now it works like a charm.