I have a simple NAT rule to redirect port 80 to my DVR (see below) ether 1 is my WAN interface
;;; DVR
chain=dstnat action=dst-nat to-addresses=192.168.2.60 to-ports=8866
protocol=tcp in-interface=ether1 dst-port=8866

Today I established a IPsec tunnel however ALL port 80 requests (no matter the IP) from the remote locations are getting re-directed to to my DVR using the NAT rule, How can I prevent the NAT rule from applying to tunneled traffic?


Thank you

There is nothing about port 80 in your rule. There is probably other rule that makes it...

here is the rule
chain=dstnat action=dst-nat to-addresses=192.168.2.60 to-ports=80-81
protocol=tcp in-interface=ether1 dst-port=80-81

What about using exclusion on src address?

That is a good Idea, Ill give it a try





Thank you