Firewall – With SonicWall, cannot access URL inside network

firewallnetworkingsonicwallweb-server

We have a website running on port 80 on our network. Port 80 is forwarded outside of the network, and it is accessible through a URL that points to the IP or the IP itself.

However, inside the network, it is not possible to access the external domain/IP address. It's possible to use the local I.P. address. For example, the web server can be accessed by using 192.168.168.22:80, but not mydomain.com. Mydomain.com works from an external network.

This is likely due to a rule in SonicWall. We are using Sonicwall TZ 215 and I am not sure what rules would allow for this access.

Let me know if I need to provide more information. Currently, there is a rule set from WAN to LAN to allow it to be accessed out of the network. I have tried some other rules, but have not found what works.

Best Answer

You need what's commonly called a "hairpin NAT" rule. You redirect internal users who are trying to reach the public IP back inside the network to the local IP.

In the sonicwall NAT rules, you'll need a rule like this:

Original Source              Translated Source       Original Destination      Translated Destination      Service
Local Subnets (or similar)   Original                <WAN IP of DNS entry>     <LAN IP of server>          Port 80

Something like this: Sonicwall Add NAT Rule

Related Solutions

Firewall – How to configure remote access to multiple subnets behind a SonicWALL NSA 2400

I'm not familiar with the NSA-series, but the article you followed was instructions how to get two subnets to talk behind ONE physical interface. You're setup is two physically separate LAN ports. It seems like setting up a static route on both SonicWalls should allow them to communicate.

Nat – Two email servers behind Sonicwall unable to communicate with each other

If you don't have NAT rules specifically handling traffic from internal subnets (generally called Firewalled Subnets) to external IPs of those internal machines, you need them. In my config they go something like this:

Original Source: Firewalled Subnets  
Translated Source: [public IP of server]   
Original Destination: [public IP of server]   
Translated Destination: [private IP of server]

Best Answer

Related Solutions

Firewall – How to configure remote access to multiple subnets behind a SonicWALL NSA 2400

Nat – Two email servers behind Sonicwall unable to communicate with each other

Related Topic