Overview

While having some internal servers or websites available to the outside Internet, so-called port mapping translation, specific host IP appears to be unreachable. The host network does not accept ping requests or SSH logins, despite having those services allowed in Traffic Rules.

The network diagram contains 2 LAN subnets (172.16.1.73 and 172.16.1.76) dedicated to public-facing services.

This article provides information on how to change the Kerio Control configuration to resolve such accessibility problems.

Solution

In this particular scenario, the Kerio Control WAN interface settings were set incorrectly. The public-facing IP 65.x.x.73 was not defined inside the additional IP addresses.

In the Interfaces configuration, double-click WAN interface -> Define Additional IP addresses -> Add the necessary IP address.