Screen OS

I want to make a portforward in my juniper ssg5 so hey can make a connection with my Minecraft server (PocketMine-MP). 

I made a Costum Service called Pocketmine-MP: TCP src port: 0-65535, dst port: 19132-19132 and UDP src port: 0-65535, dst port: 19132-19132 (19132 is the port from PocketMine-MP)

Then I made a VIP Entry at the ethernet0/0 (Interfaces --> list). Here I used the following information:

VirtualIP: 11.222.333.44 (my ethernet0/0 ipaddress)

Virtual Port: 19132

Map to Service: PocketMine-MP (19132)

Map to IP: 192.168.1.3 (ipaddress from pc where MocketMine-MP is installed

Server Auto Detection : Enable

After that I made a Policy from Untrust to Trust. Here I used the following information:

Source Address: Address Book Entry: Any

Destination Address: Address Book Entry: VIP(ethernet0/0)

Service: PocketMine-MP

Action: Permit

When I try to make a connection with my Minecraft server (with 11.222.333.44:19132) I get the message that he can not find the server. 

What am I doing wrong??

Hi,

The configuration looks good. To start with, you can enable 'logging' and 'at session beginning' options on the VIP policy. With this, you can actually see if the packets from MC server are reaching the firewall on the expected ports.

If this does not show anything, you can collect a 'flow basic' debug on the firewall to identify what is happening to the connection attempts from MC server.

Try turning off the "Server Auto Detection" parameter.  When this detects the server as offline it will stop doing the vip forwarding.  With custom ports like this you can get false shutdowns.

Turning off the Server Auto Detection was the solutin.

Thanks!!