port forwarding with NAT reflection

[jjrushford]

I recently replaced my Netgear router with OPNsense and am running the latest version.  I re-established my WebDAV port forward and it's working fine with the exception NAT reflection.  It is my understanding the with NATe reflection enabled that I should be able to use the port forward from the local LAN by using the WAN IP address/url.  I've found that I can only access the WebDAV port forward using the WAN URL only when I'm remote and I have to use the local URL when on the LAN.  I'm wondering if there are any additional requirements to get the NAT reflection to work?  Does it require some special firewall rule?  I have a rule in for just the port forward from the WAN. 

[Monviech (Cedrik)]

https://docs.opnsense.org/manual/how-tos/nat_reflection.html

[jjrushford]

Thanks for the link to the documentation.  I have a simple setup.  I just have a LAN and WAN interface with no DMZ.  On my LAN, I have a WebDAV server and port forwarding works fine when I'm away from my home network. However, I cannot get the port reflection to work.  I've tried the port reflection Method 1 configuration as described in the documentation precisely except I did not add a DMZ rule as I do not have a DMZ.  Method 1 is not working.  I'm new to OPNsense and firewall rules and am not sure how to troubleshoot/fix this.  Any ideas are greatly appreciated.

[Monviech (Cedrik)]

The DMZ is just an example.

In your case you need the WAN/LAN Port Forward rule, and additionally the LAN Outbound NAT rule. Then it will work.

[jjrushford]

Thanks for your help!  I got it working by adding the outbound NAT rule on the LAN.