Inbound NAT Rule Order

Product Discussion Other Products
1

Is there a way how to change the order of an Inbound Service NAT Rule? Say I want to add a new service which uses a specific port to the top of the rule base, how should I achieve that?

Thanks

2

NAT Rules don’t have precedence so can not be ordered and cannot overlap… what are you trying to achieve?

1 Like
3

Let’s say I have a public IP address 1.1.1.1 and every port is being NATted to 192.168.1.6. However I want the same public IP address 1.1.1.1 to NAT port 22 on IP address 192.168.1.7. I need to have the rule of the ssh before the one where it has all the ports.

4

Ah OK. So the more specific NAT rule wins in this case as its technically two different types of NAT rule.

If you had a 1:1 NAT rule (so all ports forwarded) to 192.168.1.6 you can also have a specific NAT rule for port 22 that points to 192.168.1.7 on the same WAN IP.

However, you can’t add an additional NAT rule for port 22 on the same WAN IP pointing to another internal IP.

1 Like