Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 26 subscribers
  • Views 383 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

No Wan Traffic

Matt Lebowski

Hate to be a pain and ask yet another question, but I'm just having a lot of issues with this FW compared to others like EdgeRouter and PFsense. Something in the firewall is blocking wan traffic from all sources, despite the rule below that says anyone to wan is fine. From the XG I am able to ping external sites fine. My rule set looks like this:

 

The denied result

2020-09-12 07:18:42Firewallmessageid="00002" log_type="Firewall" log_component="Firewall Rule" log_subtype="Denied" status="Deny" con_duration="0" fw_rule_id="4" nat_rule_id="0" policy_type="2" user="" user_group="" web_policy_id="2" ips_policy_id="0" appfilter_policy_id="0" app_name="" app_risk="0" app_technology="" app_category="" vlan_id="" ether_type="IPv4 (0x0800)" bridge_name="" bridge_display_name="" in_interface="Port1" in_display_interface="Port1" out_interface="" out_display_interface="" src_mac="b8:27:eb:02:b5:6a" dst_mac="" src_ip="10.0.0.199" src_country="" dst_ip="9.9.9.9" dst_country="FRA" protocol="UDP" src_port="35831" dst_port="53" packets_sent="0" packets_received="0" bytes_sent="0" bytes_received="0" src_trans_ip="" src_trans_port="0" dst_trans_ip="" dst_trans_port="0" src_zone_type="" src_zone="" dst_zone_type="" dst_zone="" con_direction="" con_id="" virt_con_id="" hb_status="No Heartbeat" message="" appresolvedby="Signature" app_is_cloud="0"



This thread was automatically locked due to age.
Parents
  • 0
    src_trans_ip=""

    You need to create a NAT Rule for that traffic.

    Also since your new, please don't use linked NAT, go to the NAT Rules Tab and create a rule like this one:

    Original Source will be your Internal networks IPv4 range.

    Translated Source will be MASQ, to hide all traffic behind a interface, ip.

    And at Outbound Interface will be your WAN Port.

    You can leave Inbound Interface as Any, because you already put the Sources in the beginning; But if you want to, you can also select your LAN's interfaces.

     

    Thanks!

Reply
  • 0
    src_trans_ip=""

    You need to create a NAT Rule for that traffic.

    Also since your new, please don't use linked NAT, go to the NAT Rules Tab and create a rule like this one:

    Original Source will be your Internal networks IPv4 range.

    Translated Source will be MASQ, to hide all traffic behind a interface, ip.

    And at Outbound Interface will be your WAN Port.

    You can leave Inbound Interface as Any, because you already put the Sources in the beginning; But if you want to, you can also select your LAN's interfaces.

     

    Thanks!

Children
No Data