kalee wrote:What do I add so that traffic coming into 50.76.130.125 gets routed to 192.168.2.70 on my local network? Another option is to simply be able to see 50.76.130.125 on my local network, as the web server has both the public IP and local ip setup.
You need a DNAT rule translating .125 to 2.70, and a SNAT rule translating 2.70 to .125.
You cannot have 125 inside your network - you don't have a routed block of IPs.
kalee wrote:Also, for the IPs that I don't have a server setup, how do I block those so they don't route to the ER-5 POE device?
You don't, since the ISP is routing them to you.
But without any rules letting them through, they're simply dropped by the firewall.