Port Forwarding on Azure

[ali.mouslmani]

Hello,

We've installed OPNsense on Azure and configured all Azure necessary traffic regarding routing and virtual networks. Everything is working fine from zone to zone traffic except natting and specifically port forwarding.

We are trying to publish a webserver with the firewall's WAN address but it is not working as expected.
port forwarding rule: (WAN)WAN-IP:443 --> (DMZ)WebSrv-IP:8443

Note below the troubleshooting done:
========================
1. Capture on WAN interface show traffic being received from our client IP.(Client SYN to WAN IP on port 443)
2. Capture on DMZ interface (webserver zone) show traffic being translated correctly and forwarded to the server.(Client SYN to WebSrv on port 8443)
Also, the reply traffic are passing through DMZ interface back to our client IP.(SYN ACK from WebSrv on port 8443 to Client IP)
3. Capture on WAN interface do not show any reply traffic (SYN ACK back to client IP is not appearing in capture)
4. The above traffic was not being blocked by any firewall rule or IPS


Any ideas?

[bulmaro]

Hello Friend
Some howto to guide me to do the installation, I want to mount my firewall in azure
Thank you for your attention.