Comment on Need Support: DMZ at home with nginx proxy to LAN

• teslasaur@lemmy.world ⁨1⁩ ⁨week⁩ ago

  Its possible, depending on how you’ve setup your NAT, that the traffic cant return due to coming from a public ip.

  source

  • nap@sh.itjust.works ⁨1⁩ ⁨week⁩ ago

    There is one DNAT rule at the public OPNsense routing the HTTP/s traffic to my proxy. Inside my DMZ an LAN is no NAT, only routing. Back out again there is a Masq/SNAT rule for my local IPs

    source

    • teslasaur@lemmy.world ⁨1⁩ ⁨week⁩ ago

      Then i assume there is something wrong in the routes from your lan when returning traffic that got initiated through the internet opnsense. If you can see traffic hit the LAN network, all should be well on the way in.

      source

      • nap@sh.itjust.works ⁨1⁩ ⁨week⁩ ago

        Hm, could be a little bit much but Public IP -> WG0 -> Proxy -> Router -> Server and back should not be ok?

        source

        • -> View More Comments