When trying to allow only a single IP address to DSTNAT to an application box I notice that only one connection is allowed from that src Add List. Can I allow more than one connection from the same IP this way?
i.e.
chain=dstnat action=netmap to-addresses=10.10.10.10 to-ports=3333 protocol=tcp dst-address=5.2.7.1 src-address-type="" src-address-list=Corp dst-port=51339 log=no log-prefix=""
Dont quite understand the question.
From the source address option, one can enter in an address or whole subnet.
From the source address list option, one can put in a wide variety of ip addresses.
Hello, yes I’m using src add list with IP addresses and when testing I found that once source IP (i.e. 2.2.2.2 in Corp src list) has been connected and then other subsequent clients from 2.2.2.2 are rejected. Only the one client from IP 2.2.2.2 is allowed a connection state. I can use other IP address to connect but only at one time not multiple connections from the same IP from the src add list.
It is because you use action=netmap instead of action=dst-nat.
netmap is a 1:1 mapping.
Yes, that was it, thanks.