Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » NAT Web Server internal access
  •  
AlanTang

Messages: 7
Karma: 0
Send a private message to this user
Hello:

May I know how can I config the rule that can allow internal access to a web server by using it's Public IP?

Thanks!
  •  
winkelman

Messages: 2119
Karma: 3
Send a private message to this user
Your question doesn't make much sense. Can you please clarify?
  •  
AlanTang

Messages: 7
Karma: 0
Send a private message to this user
Sorry for my english was not enough, let me try to explain.

My FW have 3 NIC as below:
NIC1 - Internet
NIC2 - DMZ
NIC3 - Internal LAN

My web server was location in DMZ and config with Public NAT successful

I got the problem when the Internal LAN user try to connect the Web server by using web server's public IP. (All user was using thie FW as proxy server)

Any suggestion?

Thanks!
  •  
winkelman

Messages: 2119
Karma: 3
Send a private message to this user
Isn't it better to rely on DNS in these cases? If your users on the LAN connect to the webservers host name instead of it's IP address, you could make sure the internal users get the proper (internal) IP address from your (internal) DNS server, whilst people on the Internet would get another (external, public) IP address that also works from the public DNS servers on the net.

This is the usual way of solving such problems where services are to be reached internally on different IP's then externally.
Previous Topic: Unable to print after firewall installation
Next Topic: How to config KWF to remotely control a computer in LAN from a computer at home
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Tue Sep 19 20:56:22 CEST 2017

Total time taken to generate the page: 0.00435 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.