ATP 700 NAT didnt forward 1:1 443 and 80 ports

extsa · July 11

Hi.

ATP 700, 1:1 forwarding to the IP WAN interface on ports 443 and 80 does not work; the ports for the GUI were changed from defaults. The firmware is up to date. Everything is ok with other ports. In the logs ACCESS FORWARD.

Did anyone have this problem?

PeterUK · July 15

Yep, i have one WAN ip. Is this a problem? I planned to change subnet WAN from /30 to bigger.

No just checking I test with one WAN IP

your log seem to show a connection to 443 without the NAT happening to port 55443 which is odd

PeterUK · July 11

Them ports should forward just fine test to a PC with

https://www.rjlsoftware.com/software/utility/portlistener/

scan for ports at GRC

https://www.grc.com/x/ne.dll?bh0bkyd2

package capture on WAN that your seeing the incoming SYN for them ports by 4.79.142.206

extsa · July 15

https://community.zyxel.com/en/discussion/comment/67642#Comment_67642

1:1 translate on 443 and 80 do not work, but with other pots everything is fine.

tonygibbs16 · July 15

Hello @extsa

I wonder if it is worth you checking that your ATP700 is running the latest firmware?

see https://support.zyxel.eu/hc/en-us/articles/360013941859-Security-Products-Firmware-Overview-and-History-Downloads-for-FLEX-ATP-USG-VPN-ZYWALL#h_01HF42Q862DD5T0Y4E7JYG3756 and the below screenshot.

You might be experiencing a bug that has been fixed, or one that has not been fixed.

Kind regards,

Tony

PeterUK · July 15

testing here with:

USG FLEX 200

V5.38(ABUI.0)

port 80 forwards to 55580 fine to a test HTTP server

Do you have one WAN IP?

extsa · July 15

https://community.zyxel.com/en/discussion/comment/67732#Comment_67732

extsa · July 15

https://community.zyxel.com/en/discussion/comment/67735#Comment_67735

i will try 5.38

extsa · July 15

Now:

still didnt work..

in logs acces forward:

can any security feature ban port 443 or 80?

https://community.zyxel.com/en/discussion/comment/67733#Comment_67733

Yep, i have one WAN ip. Is this a problem? I planned to change subnet WAN from /30 to bigger.

PeterUK · July 15

Yep, i have one WAN ip. Is this a problem? I planned to change subnet WAN from /30 to bigger.

No just checking I test with one WAN IP

your log seem to show a connection to 443 without the NAT happening to port 55443 which is odd

extsa · July 16

Ty guys. The problem was in our LAN.

ATP 700 NAT didnt forward 1:1 443 and 80 ports

Accepted Solution

All Replies

Categories

Consumer Product Help Center