Site Tools


forward-basic

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
forward-basic [2024/10/09 22:46] – [PAT] -Condense, formatting hogwildforward-basic [2024/11/27 01:45] (current) – [Advanced Scenarios] hogwild
Line 30: Line 30:
  \\  \\
  
-**On:** Checking this enables the settings in that row of the table. (Default: Off).+**On:** checking this enables the settings in that row of the table. (Default: Off).
  
  \\  \\
  
-**Protocol:** This selects which transport layer protocols are forwarded. (Default: UDP)+**Protocol:** here, select which transport layer protocols are forwarded. (Default: UDP)
  
-  * UDP - Only UDP connections are forwarded +  * UDP - only UDP connections are forwarded 
-  * TCP - Only TCP connections are forwarded +  * TCP - only TCP connections are forwarded 
-  * Both - Both UDP and TCP connections are forwarded+  * Both - both UDP and TCP connections are forwarded
  
 \\ \\
Line 46: Line 46:
  \\  \\
  
-**Src Address**: (Optional). This restricts the rule so it's applied only from certain source addresses. DNS hostnames, FQDN names and IP addresses are valid here. Leaving this empty configures port forwarding "from any address".+**Src Address**: this option restricts the rule so it's applied only from certain source addresses. 
 + 
 +DNS hostnames, FQDN names and IP addresses are valid here. Leaving this empty configures port forwarding "from any address".
  
  \\  \\
  
-**Ext Port:** Defines a mapping to the (external) port the Internet connection is expecting. It can be a single port/range, with syntax: "FromPort-ToPort".+**Ext Port:** defines a mapping to the (external) port the Internet connection is expecting. 
 + 
 +This can be a single port/range, with syntax: "FromPort-ToPort".
  
  \\  \\
  
-**Int Port:** (Optional). Here, specify a different (internal) port for the target LAN IP address. Leaving this empty uses the same port as the Ext Port setting (Default: empty).+**Int Port:** this option lets you specify a different (internal) port for the target LAN IP address. 
 + 
 +Leaving this empty uses the same port as the Ext Port setting (Default: empty).
  
  \\  \\
  
-**Int Address:** Specifies the internal address to which the port on the LAN the traffic should be redirected.+**Int Address:** specifies the internal address to which the port on the LAN the traffic should be redirected.
  
  \\  \\
  
-**Description:** Here, enter any text to remind you of the reason for the mapping. Most users enter the application name or protocol used. For example: "RDP" or "Mail Server".+**Description:** here, enter any text to remind you of the reason for the mapping. 
 + 
 +Most users enter the application name or protocol used. For example: "RDP" or "Mail Server".
  
  \\  \\
Line 71: Line 79:
 ==== Advanced Scenarios ==== ==== Advanced Scenarios ====
  
-As we know, only one given socket (port/protocol combination) can be forwarded at any given time. For example, if port 80 is already redirected to 192.168.1.10, this port is now "taken" from the router's pool and all inbound connections will be redirected to the mapped LAN IP address. However, there are two ways to allow you to multiplex connectivity on the same port.+Only one given socket (port/protocol combination) can be forwarded at given time. For example, if port 80 is already redirected to 192.168.1.10, this port is now "taken" from the router's pool and all inbound connections will be redirected to the mapped LAN IP address. However, there are two ways to allow you to multiplex connectivity on the same port.
  
 === Reverse Proxy === === Reverse Proxy ===
  
-In order to perform its job, a proxy must speak the protocol used by the application. For example, an HTTP proxy cannot serve SMTP.  If you needed to redirect, say,  HTTP to multiple internal hosts from the same external port, a reverse proxy is a good solution. According to HTTP v1.1, the target hostname must be included in the HTTP client request. This allows a proxy to fetch such information, and redirect it according to the requested domain. Nginx is able to perform this so-called reverse-proxy for HTTP/HTTPS.+To do its job, a proxy must speak the protocol used by the application. For example, an HTTP proxy cannot serve SMTP.  If you need to redirect, say,  HTTP to multiple internal hosts from the same external port, a reverse proxy is a good solution. According to HTTP v1.1, the target hostname must be included in the HTTP client request. This allows a proxy to fetch such information, and redirect it to to the requested domain. Nginx is able to perform this reverse-proxy for HTTP/HTTPS.
  
 === Source Bound Redirection === === Source Bound Redirection ===
  
-If the source IP and/or FQDN is well-known, you can create multiple port mapping references on the same port:protocol combination as long as the source is defined differently.  The following settings would work fine:+If the source IP and/or FQDN is well-known, you can create multiple port mapping references on the same port:protocol combinationas long as the source is defined differently.  The following settings would work fine:
  
  \\  \\
Line 87: Line 95:
  \\  \\
  
-The settings above would cause traffic from the IP address(es) of "source.example.com" towards ports 80 and 443 on the router, to be redirected to the specific LAN address in that rule. They would also cause traffic on such ports that was //not// from source.example.com to be redirected to a different LAN IP address.+The above settings would cause traffic from the IP address(es) of "source.example.com" towards ports 80 and 443 on the router, to be redirected to the specific LAN address in that rule. They would also cause traffic on such ports that was //not// from source.example.com to be redirected to a different LAN IP address.
  
  \\  \\
 +
 + \\ \\
  
  
forward-basic.1728510418.txt.gz · Last modified: 2024/10/09 22:46 by hogwild