Page 1 of 1

Reach domain name from inside LAN

Posted: Fri Jan 18, 2019 8:15 pm
by faxxe
Hello from Austria.....
This is my first entry here but with a read a ot and so far my system works well. 1100ahx4

My question is:
i have a domain as example : www.xyz.com
With my mobile phone i can connect to my webcam by: wwww.xyz.com:1234
To have this there is a dst-NAT rule in my router with dst-port 1234 to the local ip:192.168.1.1 dport 1234
This works well. Normall port forwarding

But:
If my mobile phone is in the LAN and i enter the same webcam adress wwww.xyz.com:1234 i cant reach the cam.
But if i enter the correct local LAN ip for the cam 192.168.1.1:1234 i can reach it

This means, with my public domain name i cant reach any device inside my LAN. From inside the LAN
I guess this is solvable but how? Maybe with dstnat ???

Thanks for your hints
faxxe

Re: Reach domain name from inside LAN

Posted: Sat Jan 19, 2019 3:32 pm
by anav
You need to sacrifice the blood of a king, ooops sorry thats for the Lord of Light and Game of Thrones, what you need is something called Hairpin NAT.

Its a specific setup so that an admin can ensure that people behind the router can access a device behind the router in the same manner that someone outside the router also accesses the device.
Just google it or do a search on the forum, its a common request

Re: Reach domain name from inside LAN

Posted: Sun Feb 03, 2019 9:32 am
by faxxe
Thanks anav, problem solved with hairpin nat :)

Regards,
faxxe