Redirect Website... - Page 3

08-07-2010, 20:24

Quote:

Originally Posted by Kymmy

Why not then use the firewall in NAT mode and put behind it all the internal stuff and use the open IP's (not behind the firewall) for a server or anything that needs a NO-NAT situation.

In my case I have the modem (cable modem 5 IP's) feeding a switch. From that switch is the servers and anything that needs a WAN IP (they're all software firewalled or too single ported to be a security risk). One port of the switch though feeds a netgear and it's behind that I have the workstations and internal equipment

That's what I was trying to do originaly but I'm not sure how to configure the NAT on the firewall!

Kymmy · 08-07-2010, 20:25

Rtfm

(page 97 onwards)

08-07-2010, 20:57

Quote:

Originally Posted by Kymmy

Rtfm

(page 97 onwards)

And without looking - that's the bit about configuring an incomming firewall rule - right?

Goes looking...

Kymmy · 08-07-2010, 20:58

Nope it's the section about turning on NAT

08-07-2010, 20:59

Quote:

Originally Posted by Kymmy

Nope it's the section about turning on NAT

Yeah - just seen - reading now...

08-07-2010, 21:03

So there is problem....I don't have any NAT settings on mine...

08-07-2010, 21:33

Bingo - runnning older firmware. Now this will be intresting - don't think I can get an updated firmware without having a subscription to livesecurity - but I may be able to get around this... ;-)

---------- Post added at 20:33 ---------- Previous post was at 20:08 ----------

Grrrr 7.5.2. was last firmware version for this model (discontinued). So I'll replace it if I want NAT work at this level....

Xaccers · 08-07-2010, 21:41

I'd ditch the watchguard and just use the zyxel in nat mode with port forwarding.
The downside of that though would be if you wanted web access to the NAS and web access to a different server on your network, unless you could configure the NAS to use a port other than 80.

Kymmy · 08-07-2010, 21:44

Fine if he only wants a single external IP..

08-07-2010, 21:49

Or I just pay for hosting - but that takes the fun out of configuring something like this!

Xaccers · 08-07-2010, 22:00

Ok swap the watchguard for a Cisco ASA

08-07-2010, 22:28

Quote:

Originally Posted by Xaccers

Ok swap the watchguard for a Cisco ASA

What's that? I hight end SA for large corporate enviroments with 100's of remote branch offices?

Richard M · 08-07-2010, 23:11

I'm struggling to see why this thread got 3 pages.

All you need to do is add a CNAME record and point it to your WAN IP at home.

Kymmy · 08-07-2010, 23:13

That's because our Mr Sainsbury didn't have a clue as to multiple IP's and NATs

09-07-2010, 08:21

Quote:

Originally Posted by Richard M

I'm struggling to see why this thread got 3 pages.

All you need to do is add a CNAME record and point it to your WAN IP at home.

...and you'd expect that to work without a port forward from your router / firewall would you?

CNAME? Is'nt it just an A record that's required?

---------- Post added at 07:21 ---------- Previous post was at 07:20 ----------

Quote:

Originally Posted by Kymmy

That's because our Mr Sainsbury didn't have a clue as to multiple IP's and NATs

..well I had a idea of how it all hangs together - the crunch bit is that my firewall won't allow me to change the NAT settings!