Page 1 of 1

Reach domain name from inside LAN

Posted: Fri Jan 18, 2019 8:15 pm
by faxxe
Hello from Austria.....
This is my first entry here but with a read a ot and so far my system works well. 1100ahx4

My question is:
i have a domain as example :
With my mobile phone i can connect to my webcam by:
To have this there is a dst-NAT rule in my router with dst-port 1234 to the local ip: dport 1234
This works well. Normall port forwarding

If my mobile phone is in the LAN and i enter the same webcam adress i cant reach the cam.
But if i enter the correct local LAN ip for the cam i can reach it

This means, with my public domain name i cant reach any device inside my LAN. From inside the LAN
I guess this is solvable but how? Maybe with dstnat ???

Thanks for your hints

Re: Reach domain name from inside LAN

Posted: Sat Jan 19, 2019 3:32 pm
by anav
You need to sacrifice the blood of a king, ooops sorry thats for the Lord of Light and Game of Thrones, what you need is something called Hairpin NAT.

Its a specific setup so that an admin can ensure that people behind the router can access a device behind the router in the same manner that someone outside the router also accesses the device.
Just google it or do a search on the forum, its a common request

Re: Reach domain name from inside LAN

Posted: Sun Feb 03, 2019 9:32 am
by faxxe
Thanks anav, problem solved with hairpin nat :)