• June 16, 2019, 06:01:27 AM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: DFL-260E DMZ to WAN problem  (Read 2698 times)

s_schaffert

  • Level 1 Member
  • *
  • Posts: 2
DFL-260E DMZ to WAN problem
« on: January 04, 2017, 12:12:51 PM »

I have a DFL-260E configured to one-to-one map multiple WAN IPs to multiple DMZ IPs for multiple servers.  The problem I am having is that the Mail Server uses the primary WAN IP to send mail rather than the Published IP defined in ARP/Neighbor Discovery assigned to it for use in the SAT and NAT rules.

I used this procedure setup SAT and NAT for each server in the DMZ:

Add the objects of both public and DMZ IP addresses for the server
Go to Objects -> Address Book -> Interface Addresses
   Click Add
   Name it eg(webpower_public_ip
   IP it eg(209.218.29.10)
   Click OK
   Click Add
   Name it eg(webpower_dmz_ip)
   IP it eg(192.168.1.10)
   Click OK
Create the objects in the ARP table
Go to Network -> ARP/Neighbor Discovery
   Click Add
   Click ARP/Neighbor Discovery
   Mode = Publish
   Interface = WAN
   IP Address eg(webpower_public_ip)
   MAC Address = default (00-00-00-00-00-00)
   Click OK
Create IP rule to map server (SAT)
Go to Policies -> Main IP Rules
   Click Add
   Click IP Rule
   Name it eg(webpower_http_map)
   Action = SAT
Address Filter
   Source Interface = any
   Source Network = all-nets
   Destination Interface = wan
   Destination Network  eg(webpower_public_ip)
   Service http-all
   Schedule = none
Static Address Translation
   SAT Translate = Destination IP
   New IP Address eg(webpower_dmz_ip)
Logging and Comments
   Logging = on    default
   Click OK
Create IP rule to allow Server NAT
Go to Policies -> Main IP Rules
   Click Add
   Name it eg(allow_webpower_http)
   Action = NAT
Address Filter
   Source Interface = any
   Source Network = all-nets
   Destination Interface = wan
   Destination Network  eg(webpower_public_ip)
   Service http-all
   Schedule = none
Network Address Translation
   NAT Translate = Use Interface Address
Application Control
Application Control = off
Logging and Comments
   Logging = on    default
        Click OK
Save and Activate the Configuration
Go to Configuration
   Click Save and Activate

The servers would respond to requests from the WAN but were not able to make Internet request until i added the following rule:
Name: dmz_to_wan
Action: NAT
Address Filter
          Source Interface: dmz



Logged

s_schaffert

  • Level 1 Member
  • *
  • Posts: 2
Re: DFL-260E DMZ to WAN problem
« Reply #1 on: January 04, 2017, 12:26:54 PM »

My current firewall (Smoothwall Corporate Firewall 5) calls the solution "Source Mapping"

Any help would be appreciated.
Thank you,
Stuart

Logged

FurryNutz

  • Poweruser

  • ▲▲
  • *****
  • Posts: 47447
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: DFL-260E DMZ to WAN problem
« Reply #2 on: January 11, 2017, 01:51:54 PM »

I recommend that you phone contact your regional D-Link support office and ask for help and information regarding this. We find that phone contact has better immediate results over using email.
Let us know how it goes please.
Logged
Cable:200mb/10Mb>NetGear C7800>DIR-882>DGS-1100>HP 24pt Gb Switch. COVR-3902/2202/1203,DIR-2680,890L,882,880L,868L,DNR-202L,DNS-345x2,DCS-933L,936L and 960L.
Go Here>Router Troubleshooting