About Marc_Smaak

Tested again with only a DNAT rule and correct default gateway config and can confirm it is working. (I had a type in my default gateway) So this is the only rule needed to make the conif of my picture working This is how I started initially  😖 Just some clear examples for diffrent usecases would for sure help. ... View more

@Sgilk wrote: Exactly. If you set the default gateway on the internal network devices to the ctrlX CORE internal network adapter IP, you would not need the SNAT rule. Strange, that is what I did as sown in the picture but it did not work. Will trey again later I am not at my system right now.  ... View more

On 2nd tought I think I get it. The Source IP address of my message towards the internal IP (172.20.0.2) would noramlly be the IP address of my laptop (192.168.2.138) With this rule it gets replaced with the IP of the ctrlX core on the internal network (172.20.0.1 ) Therfore the internal device just replies to 172.20.0.1 and does not need a Default gateway. Is this indeed the correct assumption? ... View more

@Sgilk Thank you this indeed works. So for testing this is my setup     And these are my firewall rules: Destination NAT   Which I beleive can even be simplified to But I suspect this only works beacuse the traffic is https so defaults to port 443. If it would be another port I need to add the port info somewhere Source NAT Also after a reboot (saving the firwall first) this all still works Thanks at lot!!! If you can explain better wat the Source net rule does this would be ewelcomed. I already worked with it but I thought it was intended for the return path to replace the source address of the device on my internal network (172.20.0.2) into the IP of the CtrlX core on the external network (192.168.2.137) This did not work.   ... View more

I tested a bit more. Only if I configure a Destination NAT rule the ctrlX open a port. NMAP scan proves this, the browser response change from "connection refused' took 'took long to respond' So the massage is not corrcetly forwarded to the other network or the answer is not coming back. Using Destination NAT makes sense since the desciption say port forwarding which is what I need. I cannot help thinking this is far too complicated, iI need get this to work by Monday else I must advise my customer to use someting else e.g. a router running openwrt (3 minute task, just did it) Any tips?? ... View more