Comment on Need Support: DMZ at home with nginx proxy to LAN

teslasaur@lemmy.world ⁨1⁩ ⁨week⁩ ago

• nap@sh.itjust.works ⁨1⁩ ⁨week⁩ ago

  Ah sry, bad choise but i masked my real LAN IPs

  source

  • teslasaur@lemmy.world ⁨1⁩ ⁨week⁩ ago

    Its possible, depending on how you’ve setup your NAT, that the traffic cant return due to coming from a public ip.

    source

    • nap@sh.itjust.works ⁨1⁩ ⁨week⁩ ago

      There is one DNAT rule at the public OPNsense routing the HTTP/s traffic to my proxy. Inside my DMZ an LAN is no NAT, only routing. Back out again there is a Masq/SNAT rule for my local IPs

      source

      • teslasaur@lemmy.world ⁨1⁩ ⁨week⁩ ago

        Then i assume there is something wrong in the routes from your lan when returning traffic that got initiated through the internet opnsense. If you can see traffic hit the LAN network, all should be well on the way in.

        source

        • -> View More Comments