Connection refused trying to DNAT

[ppulham]

I have 3 interfaces:

WAN (eth0)
DMZ (eth1)
LAN (eth2)

I’m trying to NAT from WAN to a server in DMZ. This is the nat rule:

     rule 107 {
         destination {
             port 80
         }
         inbound-interface eth0
         log
         protocol tcp
         translation {
             address x.x.x.x
         }
     }

Ive removed all the firewall rules from the WAN and DMZ interfaces and I still get connection refused.

I can ping the DMZ machine fine from the router.

Am I missing something from the NAT rule?

[Viacheslav]

From VyOS host

sudo curl http://x.x.x.x

[ppulham]

doh!

Thanks for that, I got connection refused which proved it was the target machine.