This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ping: sendmsg: Operation not permitted

ive added a packetfilter rule like from client dmz to server internal network any service allow

but i cannot ping any computers in the internal network from the dmz and vice versa. i dont know what im doing wrong

This thread was automatically locked due to age.

Parents

0 ehudler over 22 years ago

Hi !
Just a stupid question - did you enable ICMP forwarding under "Packet Filter / ICMP" ? - If not - that's the problem !
regards,
Erich [;)]
Cancel
Vote Up 0 Vote Down

Cancel
0 orhan over 22 years ago in reply to ehudler

icmp forwarding enabled

all ping settings are enabled

via astaro ssh i can ping both networks but when i ping from a computer in the dmz the internal network i get opertion not permitted.
Cancel
Vote Up 0 Vote Down

Cancel
0 SecApp over 22 years ago in reply to orhan

time for a traceroute from the DMZ...
Cancel
Vote Up 0 Vote Down

Cancel
0 ehudler over 22 years ago in reply to orhan

Hello orhan!
Some more questions:
Besides your filter-rule "DMZ --> internal-net any service allow", did you put "internal-net --> DMZ any service allow" also ? - or is there any filter-rule above your "permit any any" which drops your pings ? - Filters are applied according there order !!!
regards,
Erich
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 ehudler over 22 years ago in reply to orhan

Hello orhan!
Some more questions:
Besides your filter-rule "DMZ --> internal-net any service allow", did you put "internal-net --> DMZ any service allow" also ? - or is there any filter-rule above your "permit any any" which drops your pings ? - Filters are applied according there order !!!
regards,
Erich
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data