Forward the same port to two different systems

Started by amd.64, July 17, 2023, 06:36:05 PM

Previous topic - Next topic
I posted this in 22.7 Legacy Series but didn't get much traction. I have upgraded to 23.1.11 in part hoping that an update would get it to work, but it is still not working.

I have an Exchange server and now a webserver on the same network, both use 443 for HTTPS.

I have a block of five static IPs from my ISP. Is it possible to have the Exchange server coming in on 443 on one public IP and the webserver coming in on 443 on another public IP?

I have created a virtual IP for each of the IPs I want to use.  I have created the port forward rules in the image below but all traffic from both IPs is forwarded to the exchange server.

Can anybody provide insight or provide a link on how to do this?


1:1 NAT for each server should solve this easily.
2x 23.7 VMs & CARP, 4x 2.1GHz, 8GB
Cisco L3 switch, ESXi, VDS, vmxnet3
DoT, Chrony, HAProxy + NAXSI, Suricata
VPN: IPSec, OpenVPN, Wireguard
MultiWAN: Fiber 500/500Mbit dual stack + 4G failover

--
Available for private support.
Did my answer help you? Feel free to click [applaud] to the left

July 17, 2023, 06:51:24 PM #2 Last Edit: July 17, 2023, 06:57:34 PM by amd.64
I have created NAT rules for both, but all traffic still goes to the exchange server.

I attempted to add an image of the two NAT rules, not sure why it was not added

The destination address needs to be a single host, i.e. 50.78.239.106 or 50.78.239.106/32 - if you specify /29 for the destination, that means all 8 addresses in that prefix are matched by the first rule.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

Quote from: Patrick M. Hausen on July 17, 2023, 07:03:17 PM
The destination address needs to be a single host, i.e. 50.78.239.106 or 50.78.239.106/32 - if you specify /29 for the destination, that means all 8 addresses in that prefix are matched by the first rule.

Awesome!

Thank you. I have only tested it once, but it did work. I had an tab open to Exchange and one to the web site.

Thank You much

I tried Googling this but everything I found was the more simple port forwards.