OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 17.1 Legacy Series »
  • [SOLVED] Port Forwarding/Rewriting
« previous next »
  • Print
Pages: [1]

Author Topic: [SOLVED] Port Forwarding/Rewriting  (Read 2433 times)

faunsen

  • Full Member
  • ***
  • Posts: 101
  • Karma: 17
    • View Profile
    • EURO-LOG AG
[SOLVED] Port Forwarding/Rewriting
« on: February 10, 2017, 11:45:13 am »
Hi,

is it possible to have a kind of dynamic port forwarding or port rewriting?

Clients in network A should access servers in network B which are listening on port 1 via port 2.
Accessing the servers port 1 directly should be prohibited.

A simple port forwarding doesn't work because I need the destination IP and a list for every server would exceed the administrative effort.

Any ideas?


Thanks,
Frank
« Last Edit: March 21, 2017, 02:46:27 pm by faunsen »
Logged

faunsen

  • Full Member
  • ***
  • Posts: 101
  • Karma: 17
    • View Profile
    • EURO-LOG AG
[SOLVED] Port Forwarding/Rewriting
« Reply #1 on: March 21, 2017, 09:42:13 am »
Hi,

it is possible since OPNsense Version 17.1.3. Many thanks franco!

Quote from: franco on March 16, 2017, 07:34:12 am
o firewall: port forwarding enhancements for tag, pool options and target subnet

To create a simple port rewriting add a Port Forward from network A to network B Destination port range: 1 with  Redirect Target IP: 0.0.0.0/0, Redirect Target Port: 2 and Pool Options: Bitmask.
To restrict it tag it with Set local tag and use this value in a rule as Match local tag.
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13653
  • Karma: 1174
    • View Profile
Re: [SOLVED] Port Forwarding/Rewriting
« Reply #2 on: March 21, 2017, 06:33:26 pm »
:)
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 17.1 Legacy Series »
  • [SOLVED] Port Forwarding/Rewriting
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2