Comment on Need Support: DMZ at home with nginx proxy to LAN
nap@sh.itjust.works 1 week agoThere is one DNAT rule at the public OPNsense routing the HTTP/s traffic to my proxy. Inside my DMZ an LAN is no NAT, only routing. Back out again there is a Masq/SNAT rule for my local IPs
teslasaur@lemmy.world 1 week ago
Then i assume there is something wrong in the routes from your lan when returning traffic that got initiated through the internet opnsense. If you can see traffic hit the LAN network, all should be well on the way in.
nap@sh.itjust.works 1 week ago
Hm, could be a little bit much but Public IP -> WG0 -> Proxy -> Router -> Server and back should not be ok?
teslasaur@lemmy.world 1 week ago
It looks incredibly convoluted. My best guess is that traffic hits 172.168.1.254 and gets routed out on the internet and doesn’t pass the dmz.
nap@sh.itjust.works 1 week ago
Should the nginx Proxy receive that package? If i trace between the LAN Host and GW, there are no Public IP’s