The local server needs to access the local service through the local public network exit, and the firewall configuration is processed.

Description:

There is an egress firewall in the current Internet environment, and there is a WEB server 192.168.1.1 ax 24 below.

The local server needs to provide WEB service mapping to the public network, and the WEB service needs to be accessed locally through the domain name.

Question:

The local server cannot access the locally provided WEB service by opening the domain name through the browser.

Reason:

After the traffic of the server accessing the local WEB service reaches the firewall first, the firewall cannot forward the data for this traffic, because the destination address is the exit IP of the firewall, so you need to configure a policy to forward the data for this special traffic.

Solution:

On the exit firewall, the source IP is the local server, the destination address is the public network IP, and the service is the service provided locally, and the source address is translated into the firewall internal interface address, and the destination address is the local server address, and the service remains unchanged.

Personal notes, if there are any mistakes, please correct them.