Screenconnect Relay port from inside same network

Networking & Firewalls
1

Hi,

I have watched Toms’s video on Moving self-hosted but can not figure out the relay port.

pfsense:10.40.0.1/23
ScreenConnect Host: 10.40.1.23/23

HAProxy is setup and works great.

External devices can hit the relay server no problem, the problem is that no internal devices in my network can connect to the relay and I can not start a session.

In my pfsense i have DNS help.mydomain.com pointed to 10.40.0.1(router) to get proper SSL, however, how do I point the relay port to the address of my screenconnect box rather than the router address?

2

You need to make sure NAT reflection is properly configured:
https://docs.netgate.com/pfsense/en/latest/nat/reflection.html

3

THanks Tom,

you helped me see where I made a mistake. I watched your video on HAproxy for only internal SSL use and created a DNS record to the router LAN address, rather than let it go out and loop back like it should.
Thanks again!