With SonicWall, cannot access URL inside network

Question

We have a website running on port 80 on our network. Port 80 is forwarded outside of the network, and it is accessible through a URL that points to the IP or the IP itself.

However, inside the network, it is not possible to access the external domain/IP address. It's possible to use the local I.P. address. For example, the web server can be accessed by using 192.168.168.22:80, but not mydomain.com. Mydomain.com works from an external network.

This is likely due to a rule in SonicWall. We are using Sonicwall TZ 215 and I am not sure what rules would allow for this access.

Let me know if I need to provide more information. Currently, there is a rule set from WAN to LAN to allow it to be accessed out of the network. I have tried some other rules, but have not found what works.

score 3 · Answer 1 · edited Jun 11 '20 at 10:02

3

You need what's commonly called a "hairpin NAT" rule. You redirect internal users who are trying to reach the public IP back inside the network to the local IP.

In the sonicwall NAT rules, you'll need a rule like this:

Original Source              Translated Source       Original Destination      Translated Destination      Service
Local Subnets (or similar)   Original                <WAN IP of DNS entry>     <LAN IP of server>          Port 80

Something like this: Sonicwall Add NAT Rule

edited Jun 11 '20 at 10:02

Community

1

answered Apr 07 '15 at 16:08

Jim G.

2,657
1
19
19

Could you be more specific? I was unable to get this working. – Jake Apr 28 '15 at 14:47
Edited to include screenshot of NAT rule window. – Jim G. Apr 28 '15 at 20:16
I do not have 'Local Subnets' as a choice. Would this perhaps be 'LAN Subnets'? – Jake Apr 28 '15 at 21:19
1

Correct. I was going from [poor] memory. – Jim G. Apr 28 '15 at 22:20
Web server is the address object of my web server. This doesn't seem to be working. Any ideas? http://i.imgur.com/cHzVLQQ.png – Jake Apr 29 '15 at 13:28
Ah, one more try - change "Translated Source" to "WAN IP of mydomain.com". Everything else looks good. – Jim G. Apr 29 '15 at 14:58

With SonicWall, cannot access URL inside network

1 Answers1