NAT "destination" and "redirect target ip"

[Red Squirrel]

When doing port forward what's the difference between "destination" and "redirect target IP"?

Say I want to forward port 8080 to internal host 10.1.1.10, which of those fields do I put that, or do I put it in both?

[Patrick M. Hausen]

Redirect target IP.

Assuming you intend to forward incoming connections from the Internet via your public IP address then destination is "WAN address", because that's what the external user is connecting to.

[Red Squirrel]

Oh ok, so "destination" is from the view point of being on the outside then?  That makes sense when I look at it that way. Guess in most cases you would just put "WAN Address" but if you had a block of static IPs then you could specify which external IP the rule is for?

[Patrick M. Hausen]

Guess in most cases you would just put "WAN Address" but if you had a block of static IPs then you could specify which external IP the rule is for?

Yes and yes.

[dseven]

Yes; the "Destination" address is prior to translation - it's what the rule matches on, and "Redirect target" is what it gets translated to. You're not the first to get this confused ;) And yes; if you had a subnet for your WAN interface, you could create virtual IPs and use those as the "Destination".