ATP500 port forwarding rule always to 443

xkp68 · November 2020

I m trying to create a port forwarding rule in my ATP500

I followed the instructions here:

https://mysupport.zyxel.com/hc/en-us/articles/360016424720--ATP-VPN-How-to-configure-address-mapping-1-1-NAT-on-security-gateway

So i created an External_IP Address Object with the Ip of my second WAN interface

and and Internal IP Address Object with the IP of a machine in DMZ.

The service i am using is HTTP_81 i created of my own.

But when i try to access

http://mysecondpublicIp:81

i am not able to reach the machine and its service, what is most strange, in the event log i can only see

a line

Category-Message- Source- Destination Note

Security Policy Control-from WAN to ZYWALL TCP, service default_allow_WAN_to_ZyWall Accept- clientip:port-External_IP:443- Access Forward

It seems like any call i made to http://mysecondpublicIp:81 is autmatically redirected to port 443.

No matter the priority of the Security Policy

And no matter if i have Redirect HTTP to HTTPs enabled or not in System->WWW.

I have an old USG 300 with the same rule, just a little different

as i followed this:

https://mysupport.zyxel.com/hc/en-us/articles/360006758360--ZyWALL-USG-How-to-create-port-forwarding-rules-for-a-group-of-ports

and everything works fine as when i type

http://mysecondpublicIp:81

i can see the "Destination" in the log is to port 81 and not 443.

Any Advice?

Thanks in advance

Filippo

P.S. Maybe this post should be a question? Any admin can modify it?
Thanks

Jeremylin · November 2020

I have the internal server behind device as well.
Here is as EX:
Server support 81 port, and IP is 192.168.1.10
Wan IP is 61.X.X.X
You may configure below

Image: https://us.v-cdn.net/6029482/uploads/editor/gu/cs5ei5ijq08i.jpg

type public with port 81 to access local server

xkp68 · November 2020

Thanks for the answer.
I have created the same rule, but what do you mean when you say "type public with port 81"?
For now i have been able to solve the problem changing the port of "configuration->System->WWW->Service control->HTTPS" from 443 to another port.
After that, i m able to reach the internal ip from internet typing http://mysecondpublicIp:81 without any problem.

ATP500 port forwarding rule always to 443

Comments

Categories

Security Highlight

Security Help Center