How to connect vm Sophos firewall port with vm ubuntu port in VMEsxi?

Question

i have problem when add filtering rules in sophos vm to block icmp when ping ubuntu vm ip. icmp stay reply, i feel vm sophos firewall don't connect with ubuntu. Can you help me everybody? 
 
 thankyou

jprusch · Answer

Even if you defined two interfaces for the sophos vm, you have put them into the same IP network. This will not work as desired. 
 Firewalling is only working when the firewall is BETWEEN the source and the target. 
 So you could use 192.168.10.1 on port1 and the 192.168.10.0 /24 network for your clients. 
 Then the Sophos vm will route the traffic between its two legs port 1 in 192.168.10.0 /24 and port2 in 192.168.1.0 /24. 
 Then your firewall rules will start to work - magic!

jprusch · Answer

I am confused: at first you wanted to BLOCK icmp packets from client reaching the ubuntu server, now that we achieved this, you want them to get through? 
 You will nedd to define a firewall-rule to access your FTP-server on the ubuntu-system from your client. That's all. 
 And static routing on the Sophos-system is not needed, as the Sophos-VM has a leg in both networks. So the IP-routing already "knows" about these two networks. The rest was already correct, the clients has to have 192.168.1.2 as gateway and the ubuntu-server has to use 192.168.10.1 as gateway. 
 You are almost done.

How to connect vm Sophos firewall port with vm ubuntu port in VMEsxi?

Top Replies