The present invention provides a message forwarding method and a message forwarding device. The method is applied to a firewall directly connected with an inner network server and includes the following steps that: when first messages sent by inner network VPN equipment are received, external network client IP addresses in the first messages and ports on the inner network VPN equipment and/or the firewall which are used for transmitting the first messages are determined; the determined external network client IP addresses are matched with the ports, so that matching relations can be generated; when a second message sent by an inner network server is received, a port matched with an external network client IP address in the second message is searched in the matching relations; and the second message is forwarded to corresponding inner network VPN equipment through the port which is found in the matching relations. With the message forwarding method and the message forwarding device provided by the embodiments of the invention adopted, the effective access of the inner network server to an external network client can be realized.