We have a SonicWall TZ 400 with a Comcast Modem in Bridge Mode. Everything works fine, except the fact that the exposed services on the LAN couldn´t be reached using the public IP of the WAN from the LAN zone.
We tried these steps with NAT Policies but doesn´t work.
This is the NAT policy configured only for test the access of the dot200 Services:
These are the firewall rules WAN-LAN:
This is the only LAN-WAN rule configured:
Monitoring the packets we have this log:
*Packet number: 1220* Header Values: Bytes captured: 62, Actual Bytes on the wire: 62 Packet Info(Time:01/25/2019 12:53:49.112): in:X0*(interface), out:--, DROPPED, Drop Code: 717(Packet dropped - Policy drop), Module Id: 27(policy), (Ref.Id: _2118_qpmjdzDifdl), 2:1) Ethernet Header Ether Type: IP(0x800), Src=[b8:ca:3a:9a:83:69], Dst=[xx:xx:xx:xx:xx:xx] IP Packet Header IP Type: TCP(0x6), Src=[10.1.10.6], Dst=[xx.xx.xx.xx] TCP Packet Header TCP Flags = [SYN,], Src=, Dst=, Checksum=0x7bd7 Application Header Not Known
What we done wrong?