Strange behavior on firewall

Hi,

I will take a guess, port D only goes to the 10 network and nothing else and what you are seeing is really a mis-classification instead of network unreachable error.

Ian

fixed spelling error.

Hi,

I will take a guess, port D only goes to the 10 network and nothing else and what you are seeing is really a mis-classification instead of network unreachable error.

Ian

fixed spelling error.

Show me how a rule should look like when I got a system with IP 10.10.11.115 that has gateway 10.10.11.254 (sophos port D) to internet.

LAN port A has 172.16.16.16 as address so that should be excluded.

Basically the rule should any zone (source )-> any host -> any zone (destination) -> any host -> any service because you are using the proxy.

The gateway would be part of your config on port D so going to any host in the destination zone will use the correct gateway.

Why are you using http and https when they are part of the 3128 proxy?

What rule does your UTM, are you using the http proxy and in what mode?

Do you have the proxy setup on your PC?

Ian

Hi

My sophos works in gateway mode. I did add http, https like in the example of the sophos help page.

I did remove http and https and it still works.

But I cannot make a rule that only allows subnet 10.10.11.x thats connected to port D can access the internet. It only works if ANY-ANY is used

Did fix it, I did add a new zone and only added that to port D.