[8.160][NOTABUG][CLOSED] connect with confidence ?

setup a new 8.160 with no firewall rules at all -
and I could access internet from internal with no problem at all.
inserted firewall rule to deny any access (any to any service any drop) just to test
and still everything from internal to external is O.K. , no masquerading, no nating.
upgraded to 8.162 and still the same
writing this post at the moment having only the deny rule on the firewall ...
routing points to the astaro, no other way around
should I be glad to have a separate/different firewall in front of my system ?
or just to deef for networking topics ?

greets,

0 Astaro Beta Bot over 14 years ago

Astaro Beta Report
--------------------------------
Version: 8.160
Type: NOTABUG
State: CLOSED
Reporter: furgl
Contributor: 
MantisID: 
Target version: 
Fixed in version: 
--------------------------------

0 furgl over 14 years ago

add: pop works, but no smtp, most(?) URLs are fine, some not, trying 8.1 ....
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 furgl over 14 years ago in reply to furgl

checked 8.1 : same result
now being back on 7.5 - and alls fine: (?)
when I don't have any outwarding rule
there is no access to extern ...
please destroy my paranoia on 8.x
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Billybob over 14 years ago in reply to furgl

Did you run the wizard and setup http proxy? Not that I don't believe you but some screeshots from any of the logs of astaro that show that the traffic is flowing without any proxy or packet filter rule would be of great help[;)] Is astaro your default gateway ?

Don't forget that if you enable http proxy, you cannot block http traffic by putting a deny http traffic packet filter rule.

Regards
Bill.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 furgl over 14 years ago in reply to Billybob

Hi, BB !

You're perfectly right - enabling proxies bypasses firewallrules
or better: adds some rules for themselves ?
Sorry, hard to accept for me, never thought of that,
even if it is the more comfortable way [;)]

greets,

furgl
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 AngeloC over 14 years ago

Furgl indeed we do ensure that once proxies are properly configured, you do not need to go create permissions in the firewall. We do that for you based on the proxy settings. This way the usability is much friendlier and allows for features to be more easily deployed. In the scheme of things, the rules that the proxies create supersede the packet filter rules as well, again for usability by the masses.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel