Sonicwall, schmonicwall

How to forward ports on a SonicWall:

Okay, it’s easy, just start steeping some hemlock into the blood of a virgin in a quartz flask upon an altar of old single sided floppies and get to work—-

you will not know this horror unless you experience it for yourself and i recommend you not.

sonicwall was clearly developed by someone who had a raging databases-where-databases-are-not-due fetish.

you do not just specify addresses. you do not just specify ports.

No.

You create address objects.
You create service objects to define ports.

Then you define NAT rules.

HOWEVER…. if you manually enter or edit anything about a NAT rule, for arcane and horrible reasons that have apparently never been addressed in over a decade worth of firmware versions, they break. The only reliable way to create these rules is to go into Quick Configuration and use the Public Server Wizard. There, you can create your objects (or select them if they’re existing already) and bake them into a NAT rule.

Then maybe 40% of the time it works and the rest of the time you’re frantically SSH’ing into a remote shell somewhere else and crying into your coffee over the output of nmap.

FUCK SONICWALL.

Leave a Reply

Your email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.