You can try disabling the auto packet filter rule checkbox for your dnats, and manually create the necessary packet filter rules. Make sure to put them at the top, with logging enabled. You'll see requests in the packet filter live log colored green, if the rule is being matched.
If no entries appear, then packets probably aren't even getting to your Astaro. If that's the case, check that the alias definition has a /32 subnet mask. It could also be an ISP issue. It's not uncommon, and if that's the case, the next router up from the astaro usually needs a reboot, or the ARP cache flushed.
|