Testing using 2 hosts, 192.168.1.40 and 192.168.2.81 and trying to get a ssh connection.
I can see the packet going one way in the firewall log:
2014:02:02-00:07:10 gateway ulogd[4495]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="8" initf="eth1" outitf="eth0" srcmac="cc:5d:4e:8f:91:9b" dstmac="76:a5:7:3d:c2:1e" srcip="192.168.1.40" dstip="192.168.2.81" proto="6" length="52" tos="0x00" prec="0x00" ttl="126" srcport="49351" dstport="22" tcpflags="SYN"
On the destination using tcpdump I can see the packet arriving and a return packet being send. On the firewall using tcpdump I can see the packet returning on the firewall, but It does not appear in the firewall log. It also does not arrive at the client.
I also noticed that the server can ping 192.168.1.254 the default gateway of the interface of the firewall in 192.168.1.0/24, but cannot ping the client on 192.168.1.40.
The same problem occurs when I try to connect to a RDP server from the same client to another server on the 192.168.2.0/24 lan. No traffic is returned to the client.
When I connect from the outside to the server it works correctly.
outside 192.168.1.0/24 192.168.2.0/24
+ + +
| +----------+ | |
| | | | |
|---| GW |------| |
| | 1.254| | |
| +----------+ | +------------+ |
| | | | | +------------+
+ |---------| FIREWALL |--------| | |
| |1.10 2.1| |--------| SERVER |
+----------+ | +------------+ | | 2.81 |
| | | | +------------+
| CLIENT |------| |
| 1.40 | | |
+----------+ + +
I am currently running 9.193-11, but cant verify if this has worked correctly in previous versions. At least it worked correctly in my previous firewall running 9.0
Maybe it is just a stupid config option I am missing...
