Port Fowarding not working

[Edvainer]

Hi guys,

I need help!

I configured my untangle to use Hostname, but I can't configure port fowarding to use my internal DVR monitoring system.

The image shows my rules config:

imagem 1.png

[jcoffin]

Is UT the edge router (Public IP on the WAN interface)?

Is the DVR gateway, the internal address of the UT?

[Edvainer]

Yes to both questions!

[bmdz]

I would forward the port in the modem to the UT and then from UT to the DVR

[jim1985]

Is your external IP a static one?

Firstly you should be able to delete the "Destined Local" condition

I think you need to add an additional condition in that port forward rule that says "Destination Address" is "*Your External IP*"

Obviously replacing *Your External IP* with your actual External IP Address

[jcoehoorn]

First, "Destined Local" here means destined for the UT device itself, not the local network. You need to get rid of that condition.

Second, you need to check if you're doing a second layer of NAT at the ISP gateway. If so, you either need to stop that (put the ISP modem in bridge mode) or also forward the ports on the modem.

[sky-knight]

Wait... what? It's a port forward rule, all port forward rules need either destined local, or destination address, if you don't specify an IP on Untangle the communication is terminating on... What are you forwarding?

The rule I see is fine, there is nothing wrong with its structure. If the device isn't accessible as expected, you need to troubleshoot what's up. That's what the port testing features in troubleshooting are for.

[oj88]

A few questions:

1. Do the other port-forwarding rules work?
2. Can you Google "what's my IP address" (from any PC behind UT) and confirm that it's the same IP address as your UT's external IP address?

Just want to be certain that you're not behind another NAT or your ISP is not implementing CGNAT.

[Edvainer]

Before the untangle, a microtik board was installed and all works well. Network DHCP was managed by a TP LINK router with DMZ and Port Foward.

[sky-knight]

Network map is required... What you've just indicated suggests you have a mess, not a network.