Error: I could not see your service on xx.xx.xx.xx on port (22)

Question

Hello. 
 I am not sure if this is a route problem or a DNAT issue. I am trying to open up port 22 in the firewall by using a DNAT rule, but when I am testing to see if the port is open on destination server, its not working. The error the website is displaying is: 
 Error: I could not see your service on xx.xx.xx.xx on port (22) Reason: No route to host. 
 Where to dig?

jprusch · Answer

Hello Trua, 
 quick and simple way: go to Network Protection/Firewall on your UTM and then "Open LiveLog". 
 Next step: reproduce your test from "outside" and look for DROPs of packets coming from that remote source. 
 If your system does not receive any packets, you have a routing problem. 
 If packets are dropped, then you did not configrue a firewall rule to allow this kind of traffic.