Can't reach public IP from within LAN

[lleachii]

@willowen100

The reason I'm wanting to get NAT loopback working is I would like to test the forwarding rules work as though I'm outside of my WAN.

@trendy

There are many more convenient ways to do that.

I would go further than @trendy. Given they're 2 separate rules, I'm unsure how that would confirm it works.

You would have to:

1. test from ["outside of your"] WAN (he covered multiple remote options); or
2. create another set of IP networks with NATing as a test scenario (but again, that doesn't test your actual rule in question).

(#1 seems so simple, and seems to be the goal of creating the firewall rule )

@willowen100

In regards to option one are you referring to what some people refer as inter-VLAN firewall rules?

Well, since it doesn't matter if it's: a network interface, IP or range, defined zone, etc....and I'm, not sure if you're referring to OpenWrt...I guess so.

config redirect                                          
        option target 'DNAT'                                         
        option src 'wan'                                           
        option proto 'tcp'                
        option src_dport '80'                                        
        option dest_port '80'                                      
        option src_ip '192.168.1.0/24'    
        option dest 'lan'                                            
        option dest_ip '192.168.xxx.yyy'                              
        option name 'REDIRECT_HTTP_LAN'

Note, the packet is made to DST to the LAN zone where the request started - this takes CPUs and using a local DNS record (option #2) instead would fix that.

@willowen100

Testing the public IP address

This public IP is identical to the one displayed as your WAN interface IP, correct?